<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="5717">
<package pkgid="49d283fe26c43555be8488ebb1d5b791a653efba8022330674853c96b94c7a95" name="389-ds-base" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="fefe38a5920c17115f7000f631119d51e6da338f25d8de31c9f9820dfa60ed10" name="389-ds-base" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="8.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
</package>
<package pkgid="332d7dd80e9359ae21de5e77e506c1746eb20fbb0406795ffdaed9e5c65ff42b" name="389-ds-base" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="9.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.4.3.36-9" date="1739448000">- Fix CVE-2024-8445</changelog>
</package>
<package pkgid="217eb2a67cf3e2a2a6f1a7f00dfabbf64fa3554cbb8277debf99bef98aba2d90" name="389-ds-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="00fe400027d17922bff5e44ae180ce900667fcb7a155a8b7f04a060a9e5afed3" name="389-ds-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="8.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
</package>
<package pkgid="e0be1b628aec1dc4408685f8a161d563fbb10321f4f5bd26730c5cf0aea7cc57" name="389-ds-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="9.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.4.3.36-9" date="1739448000">- Fix CVE-2024-8445</changelog>
</package>
<package pkgid="d0f5b98427c5178e1b009fa38e443b8d68c5cae52c08270a79aa8207a60ec6a7" name="389-ds-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="10f32375a7ad6613bf9176c022f648fc44fb72de0a88ce237f582becce4f086c" name="389-ds-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="8.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
</package>
<package pkgid="14851144e01d72d58483da1c501d5640aea2c3dd7c6cc6a42e84cc6271f56e67" name="389-ds-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="9.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.4.3.36-9" date="1739448000">- Fix CVE-2024-8445</changelog>
</package>
<package pkgid="443b797021f06df3ad258224e6e057fcc4d4677de2126c221c7dee51247381f1" name="389-ds-base-devel" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="e29b8621fe6e56422ff1fd917cecb9bd9d980a4b6f15634a62c0690d9f49537b" name="389-ds-base-devel" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="8.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
</package>
<package pkgid="23f393baafc2dd9fd5f37be4f81670277f595d8f05ac636ff98975aca7d09aee" name="389-ds-base-devel" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="9.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.4.3.36-9" date="1739448000">- Fix CVE-2024-8445</changelog>
</package>
<package pkgid="86845efa0ed79977a5813f24ed65a510157d1bfb611a0e4ac479294a62bc655c" name="389-ds-base-help" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="285ff4d7b1987698673f019af10a901d53f8f607aa43eaf5f1f9451b06a82348" name="389-ds-base-help" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="8.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
</package>
<package pkgid="e5657d6e9e081d71af9ccf2ed4e57a87c2ae9c9cf86f5bbf94080e395105355a" name="389-ds-base-help" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="9.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.4.3.36-9" date="1739448000">- Fix CVE-2024-8445</changelog>
</package>
<package pkgid="396483059e253ce112e4accde16e76a0e0b4667ad66c5d57342c3f6e95dc239f" name="389-ds-base-legacy-tools" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="249897d0f4c39dc118d2f92cb2478b73d841961e36c30363a8f96084f7117f0d" name="389-ds-base-legacy-tools" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="8.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
</package>
<package pkgid="6d217f640786b904d062fe2f5478dddeccbfdb97e73a66a1ab102b27c5c3382b" name="389-ds-base-legacy-tools" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="9.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.4.3.36-9" date="1739448000">- Fix CVE-2024-8445</changelog>
</package>
<package pkgid="b2e3f176c051441d8155c05ada43b02fdce24f7ff30841276b61015db5aa18dc" name="389-ds-base-snmp" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="dee2abd9ebf16a9fe946462b405c65f62255a66640d7517290c7c5fd4647b2e3" name="389-ds-base-snmp" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="8.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
</package>
<package pkgid="693c27714c62e6ff79084bc4f0a6950e8377b4b3c038760fd1dfee15254fb021" name="389-ds-base-snmp" arch="aarch64">
  <version epoch="0" ver="1.4.3.36" rel="9.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.4.3.36-9" date="1739448000">- Fix CVE-2024-8445</changelog>
</package>
<package pkgid="cd61b1a1fd25bb362169944b22bab8dc3ab348360a9c1af2df88e51a936b988f" name="AI4C" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="2.oe2203sp4"/>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-1" date="1717588800">- Release 0.1.0</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-2" date="1718971200">- Add batch inference feature and optimizer model</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-3" date="1721736000">- Bugfix-for-tensor-formation-and-update-block-correct</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-4" date="1721822400">- Update-block-correction-model.patch</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-5" date="1722945600">- Remove path dependencies for building AI4Compiler framework</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-1" date="1723636800">- Update AI4C from v0.1.0 to v0.2.0.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-2" date="1727265600">- Add interface and model for Auto LTO.</changelog>
</package>
<package pkgid="6a10aad97fceb857b30308b1717b6f7528d0e3f287b8248bdd8731571fdea987" name="AI4C" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="3.oe2203sp4"/>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-1" date="1717588800">- Release 0.1.0</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-2" date="1718971200">- Add batch inference feature and optimizer model</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-3" date="1721736000">- Bugfix-for-tensor-formation-and-update-block-correct</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-4" date="1721822400">- Update-block-correction-model.patch</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-5" date="1722945600">- Remove path dependencies for building AI4Compiler framework</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-1" date="1723636800">- Update AI4C from v0.1.0 to v0.2.0.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-2" date="1727265600">- Add interface and model for Auto LTO.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-3" date="1728561600">- Update auto-lto model.</changelog>
</package>
<package pkgid="cb727b6f401265463a0b69183a637cd00cc9d168bf56013ed77d83de33a9f036" name="AI4C-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="2.oe2203sp4"/>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-1" date="1717588800">- Release 0.1.0</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-2" date="1718971200">- Add batch inference feature and optimizer model</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-3" date="1721736000">- Bugfix-for-tensor-formation-and-update-block-correct</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-4" date="1721822400">- Update-block-correction-model.patch</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-5" date="1722945600">- Remove path dependencies for building AI4Compiler framework</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-1" date="1723636800">- Update AI4C from v0.1.0 to v0.2.0.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-2" date="1727265600">- Add interface and model for Auto LTO.</changelog>
</package>
<package pkgid="936254d072bdb9da294b9409f332269904d5f71653a87eac2cf7ea78d3dfbb29" name="AI4C-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="3.oe2203sp4"/>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-1" date="1717588800">- Release 0.1.0</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-2" date="1718971200">- Add batch inference feature and optimizer model</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-3" date="1721736000">- Bugfix-for-tensor-formation-and-update-block-correct</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-4" date="1721822400">- Update-block-correction-model.patch</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-5" date="1722945600">- Remove path dependencies for building AI4Compiler framework</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-1" date="1723636800">- Update AI4C from v0.1.0 to v0.2.0.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-2" date="1727265600">- Add interface and model for Auto LTO.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-3" date="1728561600">- Update auto-lto model.</changelog>
</package>
<package pkgid="9a82cffa334f582f85d698accc856f45a3a2cdccbfab519b0e4ca597716f9a6a" name="AI4C-debugsource" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="2.oe2203sp4"/>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-1" date="1717588800">- Release 0.1.0</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-2" date="1718971200">- Add batch inference feature and optimizer model</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-3" date="1721736000">- Bugfix-for-tensor-formation-and-update-block-correct</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-4" date="1721822400">- Update-block-correction-model.patch</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-5" date="1722945600">- Remove path dependencies for building AI4Compiler framework</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-1" date="1723636800">- Update AI4C from v0.1.0 to v0.2.0.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-2" date="1727265600">- Add interface and model for Auto LTO.</changelog>
</package>
<package pkgid="4e5ce7c1d3a0022b46e78495d497791a86c32202a72fe38f68140e39d0eec63d" name="AI4C-debugsource" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="3.oe2203sp4"/>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-1" date="1717588800">- Release 0.1.0</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-2" date="1718971200">- Add batch inference feature and optimizer model</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-3" date="1721736000">- Bugfix-for-tensor-formation-and-update-block-correct</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.1.0-4" date="1721822400">- Update-block-correction-model.patch</changelog>
  <changelog author="Feiyang Liu &lt;liufeiyang6@huawei.com&gt; - 0.1.0-5" date="1722945600">- Remove path dependencies for building AI4Compiler framework</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-1" date="1723636800">- Update AI4C from v0.1.0 to v0.2.0.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-2" date="1727265600">- Add interface and model for Auto LTO.</changelog>
  <changelog author="Zhenyu Zhao &lt;zhaozhenyu17@huawei.com&gt; - 0.2.0-3" date="1728561600">- Update auto-lto model.</changelog>
</package>
<package pkgid="8a878c79e1f9e6e9fdf639b1d23a228213ca937af3a359a3ae106619a40ac247" name="DCF" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="9.oe2203sp4"/>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 1.0.0-5" date="1685361600">- add loongarch64 support</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1.0.0-6" date="1690545600">- Add riscv64 support</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 5.0.1-7" date="1714996800">- Update version to 5.0.1</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.0.1-8" date="1730116800">- adopt to cmake macro change</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-9" date="1730548800">- Update version to 6.0.0</changelog>
</package>
<package pkgid="e04832407d993a63e832b074d90d9fb0a7d333f1e146bf44fbab06398fa7c778" name="DCF-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="9.oe2203sp4"/>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 1.0.0-5" date="1685361600">- add loongarch64 support</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1.0.0-6" date="1690545600">- Add riscv64 support</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 5.0.1-7" date="1714996800">- Update version to 5.0.1</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.0.1-8" date="1730116800">- adopt to cmake macro change</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-9" date="1730548800">- Update version to 6.0.0</changelog>
</package>
<package pkgid="e8a06414563e20dc91c8cbb0cb804e1915ffa0d0c5cb2e4559f03091ba4a7d10" name="DCF-debugsource" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="9.oe2203sp4"/>
  <changelog author="huajingyun&lt;huajingyun@loongson.cn&gt; - 1.0.0-5" date="1685361600">- add loongarch64 support</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1.0.0-6" date="1690545600">- Add riscv64 support</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 5.0.1-7" date="1714996800">- Update version to 5.0.1</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.0.1-8" date="1730116800">- adopt to cmake macro change</changelog>
  <changelog author="liuheng &lt;liuheng76@huawei.com&gt; - 6.0.0-9" date="1730548800">- Update version to 6.0.0</changelog>
</package>
<package pkgid="1a30ab42a7b8eec2ecddbf6e8928075314deb555dd9bafa5db1d41fe4528e206" name="GraphicsMagick" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.3.41-2" date="1745928000">- Fix CVE-2025-27795 and CVE-2025-32460</changelog>
</package>
<package pkgid="f7378e9e7a618a63246fce8c2afabd254c1abf5ec9881f4232f40e3030097bbb" name="GraphicsMagick-c++" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.3.41-2" date="1745928000">- Fix CVE-2025-27795 and CVE-2025-32460</changelog>
</package>
<package pkgid="9c02e828ec0a989bc6db171f5b699cf02e353231a6f8f091d3abf61e99c4845d" name="GraphicsMagick-c++-devel" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.3.41-2" date="1745928000">- Fix CVE-2025-27795 and CVE-2025-32460</changelog>
</package>
<package pkgid="797f1195ceaa5bb04db84ce9851a6fb61e15ab9880fdebef38fbbafbe83e60fc" name="GraphicsMagick-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.3.41-2" date="1745928000">- Fix CVE-2025-27795 and CVE-2025-32460</changelog>
</package>
<package pkgid="2af687b8409b5767fbd83d35ac03e88413dc9df4cd41814ff2a4b7ceb94d3619" name="GraphicsMagick-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.3.41-2" date="1745928000">- Fix CVE-2025-27795 and CVE-2025-32460</changelog>
</package>
<package pkgid="c29b28c2ec0aefa33d2193f48317c0f814b94deb829fe377383d0575bf968fce" name="GraphicsMagick-devel" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.3.41-2" date="1745928000">- Fix CVE-2025-27795 and CVE-2025-32460</changelog>
</package>
<package pkgid="0b9b3a33c8c8f55d5c6e6f2ff8b36ca47d6769eb4a13a45bcd2f16877b9daf39" name="GraphicsMagick-help" arch="noarch">
  <version epoch="0" ver="1.3.41" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.3.41-2" date="1745928000">- Fix CVE-2025-27795 and CVE-2025-32460</changelog>
</package>
<package pkgid="4bba495a0b7e41822d373a60d2cd6573db224758fcb12e792b6dbd02c4c07ba3" name="GraphicsMagick-perl" arch="aarch64">
  <version epoch="0" ver="1.3.41" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.3.41-1" date="1694606400">- Update to 1.3.41 for fix CVE-2020-21679</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.3.41-2" date="1745928000">- Fix CVE-2025-27795 and CVE-2025-32460</changelog>
</package>
<package pkgid="2e8870b7bb7981f9ddbfdb0119c18ff267640e1f546bd03002d32ebd15930d37" name="ImageMagick" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
</package>
<package pkgid="5dda6b8b558ccb7059db62ea1a50924ac0f0715b6fe163fcbb33ed400f18ca5c" name="ImageMagick" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-7" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
</package>
<package pkgid="a456eaf6bd9d702c28431b1cc7bd90caead50fbf186c7a1fa2ed6ef408ced872" name="ImageMagick-c++" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
</package>
<package pkgid="0a3f02e0b2c52723ca330040d0090bf53e5f43a60f3a95d9820922691ffaa730" name="ImageMagick-c++" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-7" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
</package>
<package pkgid="ac15a01d8bc0f522ed800c19b095eea776f735065cc23ebf17889b4d446ee263" name="ImageMagick-c++-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
</package>
<package pkgid="cb0638c2f730325f7e00d919c52d81c14776643a5620afdcf6ef5cb710289069" name="ImageMagick-c++-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-7" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
</package>
<package pkgid="a7b86a2c3196c7815470cac58ab0730e48c52ba516c63befb156234b2e8cfc3f" name="ImageMagick-debuginfo" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
</package>
<package pkgid="b732baa1f4bfc53fdcaeaf6c7973302cd3445940594008580753236d191c4433" name="ImageMagick-debuginfo" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-7" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
</package>
<package pkgid="aa6360e9cb4b4cacd1812ea9b23b8c029d946d6958f2d912e72586dd91bbed30" name="ImageMagick-debugsource" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
</package>
<package pkgid="1a8d6cd23ba24758e3ebb991970074fd09ee6c07b0c46e3f2aac438ac78d3594" name="ImageMagick-debugsource" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-7" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
</package>
<package pkgid="b82587e59ab392bcfd3174c1d6216c1433c97f284b8b2ee6dbaed5d0aedbb1f7" name="ImageMagick-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
</package>
<package pkgid="2e66d449f434c00330f7234b2adb01a94cbb36dbbf4b6db66ba6c09fd1d83167" name="ImageMagick-devel" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-7" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
</package>
<package pkgid="0bd3a2cb2119da3011bcbb8edfbe5b3c9c2b3a80a864e776c3e0d659628f354e" name="ImageMagick-help" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
</package>
<package pkgid="a0a0db3e40b0750648a1275470bdd1beb4663d651ce016f76e143adea368f04f" name="ImageMagick-help" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-7" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
</package>
<package pkgid="a094f4e66adb4d7c46184c45b5ec04c2ea419a3723445691c93d4c07878f0417" name="ImageMagick-perl" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-2" date="1686225600">- Fix CVE-2023-34151 and CVE-2023-34153</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-3" date="1688040000">- Fix CVE-2023-34474 and CVE-2023-34475</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
</package>
<package pkgid="0f60c6f7a1129d52ee4035680d7b68862e7ebe3fd60969d5b7d46e17c6b5ad59" name="ImageMagick-perl" arch="aarch64">
  <version epoch="1" ver="7.1.1.8" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-4" date="1690200000">- Fix CVE-2023-3428</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:7.1.1.8-5" date="1696680000">- Fix CVE-2023-5341</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1:7.1.1.8-6" date="1745928000">- Fix CVE-2025-43965 and CVE-2025-46393</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1:7.1.1.8-7" date="1753099200">- Fix CVE-2025-53014, CVE-2025-53015, CVE-2025-53019, CVE-2025-53101</changelog>
</package>
<package pkgid="b181e72b8147cded7b09781c1c9c98dfb26b5ab7b3375d5ec263a20c972420c2" name="LibRaw" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="9.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
  <changelog author="hdliu &lt;hdliu@linx-info.com&gt; - 0.20.2-8" date="1745236800">- Fix CVE-2025-43963</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.20.2-9" date="1746532800">- Fix CVE-2025-43961,CVE-2025-43962 and CVE-2025-43964</changelog>
</package>
<package pkgid="11016acfb54071739281aa9041372dea77a4fb862e0d77b35511810d49207efa" name="LibRaw-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="9.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
  <changelog author="hdliu &lt;hdliu@linx-info.com&gt; - 0.20.2-8" date="1745236800">- Fix CVE-2025-43963</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.20.2-9" date="1746532800">- Fix CVE-2025-43961,CVE-2025-43962 and CVE-2025-43964</changelog>
</package>
<package pkgid="d91989ced5bd3b9b156cfc67552b17c35f05eb660bcd9209dab9a86d9032921f" name="LibRaw-debugsource" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="9.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
  <changelog author="hdliu &lt;hdliu@linx-info.com&gt; - 0.20.2-8" date="1745236800">- Fix CVE-2025-43963</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.20.2-9" date="1746532800">- Fix CVE-2025-43961,CVE-2025-43962 and CVE-2025-43964</changelog>
</package>
<package pkgid="45b126f4de894f26c5117478e1c92adf86af0486abe4a2d09fc3cf614b1915a2" name="LibRaw-devel" arch="aarch64">
  <version epoch="0" ver="0.20.2" rel="9.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-6" date="1684152000">- Fix CVE-2023-1729</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.20.2-7" date="1711454400">- Fix CVE-2021-32142</changelog>
  <changelog author="hdliu &lt;hdliu@linx-info.com&gt; - 0.20.2-8" date="1745236800">- Fix CVE-2025-43963</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.20.2-9" date="1746532800">- Fix CVE-2025-43961,CVE-2025-43962 and CVE-2025-43964</changelog>
</package>
<package pkgid="8d3e1917fed1b4b458f9a8b6f756624534491f58a35a8bc1dd792ba333228a40" name="NetworkManager-libreswan" arch="aarch64">
  <version epoch="0" ver="1.2.24" rel="1.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.2.16-1" date="1696680000">- Update to 1.2.16</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.2.24-1" date="1730203200">- Update to 1.2.24:
  * Fixed formatting of ipsec.conf snippet. This is a security
  issue with severity of "Important." (CVE-2024-9050)
  * Added support for "require-id-on-certificate" setting.
  * Updated Georgian, Slovenian and Ukrainian translations.</changelog>
</package>
<package pkgid="04800a134c22f24b4d198735acba87f00b0c5bdb2893e03367ca41dd9bbbe67a" name="NetworkManager-libreswan-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.24" rel="1.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.2.16-1" date="1696680000">- Update to 1.2.16</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.2.24-1" date="1730203200">- Update to 1.2.24:
  * Fixed formatting of ipsec.conf snippet. This is a security
  issue with severity of "Important." (CVE-2024-9050)
  * Added support for "require-id-on-certificate" setting.
  * Updated Georgian, Slovenian and Ukrainian translations.</changelog>
</package>
<package pkgid="525fc0b32d55fcf5f4d80604a0a410e788b32ce01d35d423bad8f457d31de63d" name="NetworkManager-libreswan-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.24" rel="1.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.2.16-1" date="1696680000">- Update to 1.2.16</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.2.24-1" date="1730203200">- Update to 1.2.24:
  * Fixed formatting of ipsec.conf snippet. This is a security
  issue with severity of "Important." (CVE-2024-9050)
  * Added support for "require-id-on-certificate" setting.
  * Updated Georgian, Slovenian and Ukrainian translations.</changelog>
</package>
<package pkgid="6fadea9f24f0499243ce863e974655777a089c3ac88859ef3790b20022db8ae7" name="NetworkManager-libreswan-gnome" arch="aarch64">
  <version epoch="0" ver="1.2.24" rel="1.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.2.16-1" date="1696680000">- Update to 1.2.16</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.2.24-1" date="1730203200">- Update to 1.2.24:
  * Fixed formatting of ipsec.conf snippet. This is a security
  issue with severity of "Important." (CVE-2024-9050)
  * Added support for "require-id-on-certificate" setting.
  * Updated Georgian, Slovenian and Ukrainian translations.</changelog>
</package>
<package pkgid="acf0afd6cfa878cf09e9757dca79164f4f085fd8134129416234557de0583dfb" name="OpenIPMI" arch="aarch64">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="7e7b2ba573c96b7cdefe8a3075a17f94d5b9c0b57436f89a2962f048aeebc643" name="OpenIPMI-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="7c3e6df8c84a08bd4ff98a8d602f5f7ed1d9cd3d7f47aecdd2d7a9d81da50e27" name="OpenIPMI-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="89c2a95ad0644af12778abea392e8d71c6821ce3843543d33eafda59b1b7f693" name="OpenIPMI-devel" arch="aarch64">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="3c0c95ad76abf516aaefd2cb9f76e31dda889971ed5731706112c55f393d08df" name="OpenIPMI-help" arch="noarch">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="7d5b9d74613f0b1de24fef4a65b6d2487d00a68c48698d03825058729cd2aa95" name="OpenIPMI-perl" arch="aarch64">
  <version epoch="0" ver="2.0.32" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-1" date="1667217600">- Type:Requirement
- CVE:NA
- SUG:NA
- DESC:update OpenIPMI version to 2.0.32</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-2" date="1680350400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix coredump when use ipmi_ui</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-3" date="1700568000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:enable test</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.32-4" date="1728648000">- Type:CVE
- CVE:CVE-2024-42934
- SUG:NA
- DESC:fix CVE-2024-42934</changelog>
</package>
<package pkgid="3222d6ec65f1e6c22668b806a801e02653ff095ed3e22920084698050cb4c4e7" name="abrt" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="070f80e327af99a54afa5fa7f9086528b90a76898e9c14972138b8b212349a2e" name="abrt-addon-ccpp" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="d64e70f122626b59d66a213cad695ba0f529d523772c458395c6b98db7734b2e" name="abrt-addon-kerneloops" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="c124ea519afc8d9be25b97a98ce12783f178800941a13212bf7f5ccb6d284dd2" name="abrt-addon-pstoreoops" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="b56c8fa57af0259161096d61b70dde70ca233cbe6f20c06b2543ff52c2e91b8c" name="abrt-addon-upload-watch" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="7cf5f865a1989dd939e097c586f1c7855bf46804650a67a7465ee198bff0fd9f" name="abrt-addon-vmcore" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="d67cf22638fef411ee13acce3315d91f2b96192d9745a2b95da32f9efb3647b7" name="abrt-addon-xorg" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="6181461feb98d21c0f037ca5e54f8e9ac0d038fc3c84992320ec7b707fb57231" name="abrt-atomic" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="e69f7e7f7d3a21a3150feacb856fa081cfb7e28f5961a550893ccaccd4782b8d" name="abrt-cli" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="ca09e185c2b8aa95d5abac741359dddf30f3666ce9734452daace7f372e33f84" name="abrt-console-notification" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="1860e09a847456b479b5c4b80de735c1f27d1ac06ad29398905accab7235556e" name="abrt-dbus" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="bec2026cdc5ee53fc291ba9e2adc645dd0b44d6b0de0622abd3cc9560c2bb88f" name="abrt-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="4ab1ef50c481edea7f1067b710632161637586dd6c77514f66a8968f82302d5a" name="abrt-debugsource" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="ce53598bb86dc82bf597b783e6b04666a8b9bc9045b5a87e6f11399c941e6a46" name="abrt-desktop" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="7d9f470faecceec312f8060813972dcd08f137a002d993a5b22bbc74c2b618ba" name="abrt-devel" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="092e0d951e9a088677c56b5aaee380dd0efd76375e76b525ff0d6f7f89ff103f" name="abrt-gui" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="70f5bc7b88b167985cfa56d179f8522888256e88d3902b07b1701066a4addd6b" name="abrt-gui-devel" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="7a85aa36327f61270e783c74a95d61f2d879999fee4654a995750149f16fbf8b" name="abrt-help" arch="noarch">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="be36871942b1489d59fbaece99438ec4582791107cd4ec07c523d458ac06050b" name="abrt-libs" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="fdddb3c86a9e3acebb71fd05422f952c84aac13b6c7571b1d1cec616e9319b88" name="abrt-plugin-machine-id" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="9d299ebb1a4e754e0473193752cf2f3b88628b81345827754b5f9aad32969052" name="abrt-retrace-client" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="ba58493228b71f64100d6323fe0d95a181a27b4138d99eee9d9aa68f56a616c7" name="abrt-tui" arch="aarch64">
  <version epoch="0" ver="2.14.6" rel="3.oe2203sp4"/>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 2.14.6-2" date="1723550400">- Added 'Buildarch: noarch' to the help subpackage</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 2.14.6-3" date="1742558400">- abrt-dbus: do not try to free session data twice</changelog>
</package>
<package pkgid="74e42b861f8b87ce1b7c028bec00c4a1ec94919cfbda1f120fa381bd464f3535" name="abseil-cpp" arch="aarch64">
  <version epoch="0" ver="20220623.1" rel="6.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-6" date="1740398400">- Type:cves
- CVE:CVE-2025-0838
- SUG:NA
- DESC:fix CVE-2025-0838</changelog>
</package>
<package pkgid="1bec72bea6fd0284d396c4af25627eed54c362b689f0a30b62f3b6cdb96c10f0" name="abseil-cpp-debuginfo" arch="aarch64">
  <version epoch="0" ver="20220623.1" rel="6.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-6" date="1740398400">- Type:cves
- CVE:CVE-2025-0838
- SUG:NA
- DESC:fix CVE-2025-0838</changelog>
</package>
<package pkgid="3537f5c8cc9a1cf46d7302473e3777325af4303545a9f49c0860a330460ae51c" name="abseil-cpp-debugsource" arch="aarch64">
  <version epoch="0" ver="20220623.1" rel="6.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-6" date="1740398400">- Type:cves
- CVE:CVE-2025-0838
- SUG:NA
- DESC:fix CVE-2025-0838</changelog>
</package>
<package pkgid="d7757b64eed2b740bddb6d0249685e3a18c4366c0e2db5259130f7074d68e7e4" name="abseil-cpp-devel" arch="aarch64">
  <version epoch="0" ver="20220623.1" rel="6.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-5" date="1713268800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Add missing include for std::unique_ptr</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20220623.1-6" date="1740398400">- Type:cves
- CVE:CVE-2025-0838
- SUG:NA
- DESC:fix CVE-2025-0838</changelog>
</package>
<package pkgid="66616b8d97d3b01e96240f98373955d71cdbb3675ddcba13b3650ecbd74de1bd" name="ansible" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="5.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.27-5" date="1733140800">- Fix CVE-2024-8775 and CVE-2024-9902</changelog>
</package>
<package pkgid="813d682ce4c83e828b7250cc72b667fd166105061c1e151fa64cca245883d802" name="ansible" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="6.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.27-5" date="1733140800">- Fix CVE-2024-8775 and CVE-2024-9902</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-6" date="1739016000">- Fix CVE-2022-3697 CVE-2023-5115</changelog>
</package>
<package pkgid="df5765a80481d3f0ca1372a029718f5dada1ea6b1240d33d93495892cf5a9de1" name="ansible" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="7.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.27-5" date="1733140800">- Fix CVE-2024-8775 and CVE-2024-9902</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-6" date="1739016000">- Fix CVE-2022-3697 CVE-2023-5115</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-7" date="1743508800">- Fix CVE-2023-5764</changelog>
</package>
<package pkgid="794348f070ddd87a4ab81aff6370a2ed8a5d42c9b3d68896568afe110b2569f6" name="ansible-help" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="5.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.27-5" date="1733140800">- Fix CVE-2024-8775 and CVE-2024-9902</changelog>
</package>
<package pkgid="b62c3ee7b8f561d429e1e2f8f4eac1037c6e8eb978643f33c6d18b68529a94a9" name="ansible-help" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="6.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.27-5" date="1733140800">- Fix CVE-2024-8775 and CVE-2024-9902</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-6" date="1739016000">- Fix CVE-2022-3697 CVE-2023-5115</changelog>
</package>
<package pkgid="43f8cadcc61d94999c999c347b1529279cb28c45aec83281e1580a55364b698b" name="ansible-help" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="7.oe2203sp4"/>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.9.27-3" date="1681905600">- Remove with_python3 macros and python3-nose buildRequire</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-4" date="1707134400">- Fix CVE-2024-0690</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9.27-5" date="1733140800">- Fix CVE-2024-8775 and CVE-2024-9902</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-6" date="1739016000">- Fix CVE-2022-3697 CVE-2023-5115</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.9.27-7" date="1743508800">- Fix CVE-2023-5764</changelog>
</package>
<package pkgid="a7fa1f7dcba39c2b753fd1966ec000b8350e3eb7b97358a0971c45c035edde94" name="apache-commons-beanutils" arch="noarch">
  <version epoch="0" ver="1.9.4" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.9.4-4" date="1751371200">- Fix CVE-2025-48734</changelog>
</package>
<package pkgid="dfe75fd3c6b913b521de4a2c735bf6c1866a3c93f9ea3c5eef54912b612b30b3" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.4" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.9.4-4" date="1751371200">- Fix CVE-2025-48734</changelog>
</package>
<package pkgid="e9c945468fdb75ff4da3be111468109ed3f58f21ce8ea7f988eae126ef5f2e1f" name="apache-commons-fileupload" arch="noarch">
  <version epoch="0" ver="1.4" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4-3" date="1751284800">- Fix CVE-2025-48976</changelog>
</package>
<package pkgid="0aade71256a788d64f2accfdeeeccca37a6fb225faf2592563607066a638880b" name="apache-commons-fileupload-help" arch="noarch">
  <version epoch="0" ver="1.4" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4-3" date="1751284800">- Fix CVE-2025-48976</changelog>
</package>
<package pkgid="6fb701246c2242e148f61a830c32e331de1919301394753cfd448791fb3aae92" name="apache-commons-lang" arch="noarch">
  <version epoch="0" ver="2.6" rel="24.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.6-24" date="1754481600">- Fix CVE-2025-48924</changelog>
</package>
<package pkgid="253a5244674d1f1a1cc96195d322b635dba940080d42e9d4d190ab1bd30d5e4a" name="apache-commons-lang-help" arch="noarch">
  <version epoch="0" ver="2.6" rel="24.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.6-24" date="1754481600">- Fix CVE-2025-48924</changelog>
</package>
<package pkgid="773640c4e48dddb5dfea27db41d3b57ffa697b2d3d69eb98d1f3e746516a89ad" name="apache-commons-lang3" arch="noarch">
  <version epoch="0" ver="3.18.0" rel="1.oe2203sp4"/>
  <changelog author="liyajie&lt;liyajie15@h-partners.com&gt; - 3.18.0-1" date="1753099200">- Upgrade version to 3.18.0</changelog>
</package>
<package pkgid="218697bccbce11939f460f0bf141fd2612bf2633c4065ff677976848f6f9f9d4" name="apache-commons-lang3-help" arch="noarch">
  <version epoch="0" ver="3.18.0" rel="1.oe2203sp4"/>
  <changelog author="liyajie&lt;liyajie15@h-partners.com&gt; - 3.18.0-1" date="1753099200">- Upgrade version to 3.18.0</changelog>
</package>
<package pkgid="7ace97a98583c1ace7c79e42ade6654a8cabbd9dcefe1cdba1edcd839287babd" name="apache-commons-vfs" arch="noarch">
  <version epoch="0" ver="2.1" rel="16.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.1-16" date="1753790400">- Fix CVE-2025-27553</changelog>
</package>
<package pkgid="1ae8c243a43fdb336bc25378b8ec2797743f8121bb642ef76f07e5318c6ac985" name="apache-commons-vfs-devel" arch="noarch">
  <version epoch="0" ver="2.1" rel="16.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.1-16" date="1753790400">- Fix CVE-2025-27553</changelog>
</package>
<package pkgid="d1f5ecfca23c8009af68eaa424ed27968b4f86bf43e254ab080772aa3fece27a" name="apache-commons-vfs-help" arch="noarch">
  <version epoch="0" ver="2.1" rel="16.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.1-16" date="1753790400">- Fix CVE-2025-27553</changelog>
</package>
<package pkgid="768b062aea0a2272ed806f77aec38d2667e081a2a81996fee08ff1c651fa2f55" name="apache-mina" arch="noarch">
  <version epoch="0" ver="2.0.27" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
</package>
<package pkgid="5734e4e8273ac158dc7c0f7fae34005df7f3969824254208ad8b971399c10bd6" name="apache-mina" arch="noarch">
  <version epoch="0" ver="2.1.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.1.10-1" date="1741262400">- Upgrade to 2.1.10 for fix mina-ftpserver build error</changelog>
</package>
<package pkgid="d314d87ec1ac67e2056349e16f44af609b8d3ccf9eca9cc12b80fd21eef15b13" name="apache-mina-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.27" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
</package>
<package pkgid="c35964290ce31abb2d0ecc6f25bc77c861150d1bcbf46e41c8022f41b27d683f" name="apache-mina-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.1.10-1" date="1741262400">- Upgrade to 2.1.10 for fix mina-ftpserver build error</changelog>
</package>
<package pkgid="265e3292e70949a03cf3c4cc816d1b5e6d2aae5df3328ea33d710582dd1aaa14" name="apache-mina-mina-core" arch="noarch">
  <version epoch="0" ver="2.0.27" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
</package>
<package pkgid="46f0af04a7f01b1e918e39b301ae89741233950fec193dedc86ce0712acce390" name="apache-mina-mina-core" arch="noarch">
  <version epoch="0" ver="2.1.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.1.10-1" date="1741262400">- Upgrade to 2.1.10 for fix mina-ftpserver build error</changelog>
</package>
<package pkgid="8ae01e8bbd9905c334dcd71602224dbb2a3d6603edce3be69804fd72274581b7" name="apache-mina-mina-filter-compression" arch="noarch">
  <version epoch="0" ver="2.0.27" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
</package>
<package pkgid="2b480191d35890a139e9ff8249cb7683dd78c121cd3abd77be2927389c8af3ac" name="apache-mina-mina-filter-compression" arch="noarch">
  <version epoch="0" ver="2.1.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.1.10-1" date="1741262400">- Upgrade to 2.1.10 for fix mina-ftpserver build error</changelog>
</package>
<package pkgid="9409a6d938cafc66d768b25534625faa2c0dfc1043dbe6309d68f51c28ce84a7" name="apache-mina-mina-http" arch="noarch">
  <version epoch="0" ver="2.0.27" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
</package>
<package pkgid="4088fd5ba75cf69d27c0266461771d1645f7ba0a8d0571c8c3b430ac6267ad8d" name="apache-mina-mina-http" arch="noarch">
  <version epoch="0" ver="2.1.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.1.10-1" date="1741262400">- Upgrade to 2.1.10 for fix mina-ftpserver build error</changelog>
</package>
<package pkgid="1e9bb310a023a5764bc4562d2f2345d57468557bb53cd465b7b5926000fe250a" name="apache-mina-mina-statemachine" arch="noarch">
  <version epoch="0" ver="2.0.27" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
</package>
<package pkgid="f7dea133ebc75de6d917988656898fc17b6016a87b45f275d309fae7e19901be" name="apache-mina-mina-statemachine" arch="noarch">
  <version epoch="0" ver="2.1.10" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.0.27-1" date="1735560000">- Upgrade to 2.0.27 for fix CVE-2024-52046</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.1.10-1" date="1741262400">- Upgrade to 2.1.10 for fix mina-ftpserver build error</changelog>
</package>
<package pkgid="3b7b60c90aab28beb78d7bddee729b316c73bd010af9f4cf74d544fdc1f4cfc7" name="arm-trusted-firmware-armv8" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="1.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; -2.9-1" date="1688731200">- Upgrade to 2.9</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9-2" date="1706011200">- Fix CVE-2023-49100</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.9-3" date="1720526400">- Fix CVE-2024-6563 CVE-2024-6564</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.9-4" date="1728993600">- Fix CVE-2024-6287</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.12.0-1" date="1732708800">- Update to 2.12.0
- Bootloader Images:
    * remove unused plat_try_next_boot_source
- Architecture:
    *Branch Record Buffer Extension (FEAT_BRBE)
    * allow RME builds with BRBE
- Arm:
    * avoid stripping kernel trampoline
    * add DRAM memory regions that linux kernel can share
    * add optee specific mem-size attribute
    * add secure uart interrupt in device region
    * enable FEAT_MTE2
    * fix the FF-A optee manifest by adding the boot info node
    * update the memory size allocated to optee at EL1
- Intel:
    * add cache invalidation during BL31 initialization
    * add in JTAG ID for Linux FCS
    * add in missing ECC register
    * add in watchdog for QSPI driver
    * bridge ack timing issue causing fpga config hung
    * correct macro naming
    * f2sdram bridge quick write thru failed
    * fix bridge enable and disable function
    * fix CCU for cache maintenance
    * flush L1/L2/L3/Sys cache before HPS cold reset
    * implement soc and lwsoc bridge control for burst speed
    * refactor SDMMC driver for Altera products
    * remove redundant BIT_32 macro
    * software workaround for bridge timeout
    * update Agilex5 BL2 init flow and other misc changes
    * update Agilex5 warm reset subroutines
    * update all the platforms hand-off data offset value
    * update CCU configuration for Agilex5 platform
    * update mailbox SDM printout message
    * update memcpy to memcpy_s ([e264b55]
    * update outdated code for Linux direct boot
    * update preloaded_bl33_base for legacy product
    * update sip smc config addr for agilex5
    * update the size with addition 0x8000 0000 base</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.12.1-1" date="1742472000">- Update to 2.12.1 for fix CVE-2024-7881 and CVE-2024-5660</changelog>
</package>
<package pkgid="2c108ef849df74a08c9edadb03365ade4d30458f91e7fd3a5d35120684595853" name="arm-trusted-firmware-armv8" arch="aarch64">
  <version epoch="0" ver="2.3" rel="5.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; -2.3-2" date="1670414400">- Add RELRO,PIE,BIND_NOW flags and fix not striped problem</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-3" date="1701432000">- Fix CVE-2022-47630</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-4" date="1706011200">- Fix CVE-2023-49100</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.3-5" date="1720526400">- Fix CVE-2024-6563 CVE-2024-6564</changelog>
</package>
<package pkgid="d3729c764015c1f00b5631a3cc6f5e0d1276a0d2c4e8bb958f48043a610a0e4a" name="arm-trusted-firmware-armv8" arch="aarch64">
  <version epoch="0" ver="2.3" rel="6.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-3" date="1701432000">- Fix CVE-2022-47630</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.3-4" date="1706011200">- Fix CVE-2023-49100</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 2.3-5" date="1720526400">- Fix CVE-2024-6563 CVE-2024-6564</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.3-6" date="1734350400">- Fix CVE-2024-6285 CVE-2024-6287</changelog>
</package>
<package pkgid="2776d6b4e968340b19a0ce13d391f5f51d4e26f547b418273835008db2d50bd8" name="assimp" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="d5c21743e69814801e2a413eb8ce000318e92d49e65c590e31a3a7aae9251ce7" name="assimp" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="3887143c40d30bdec3208a0f89ed6a11db8379cb28aab5f9b8bf81c3947c3d04" name="assimp" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="d4802c919341aae2f22f64edb2ee4de4e47b516ffc92c5d818d5b9dd1c5499d4" name="assimp" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="5.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
</package>
<package pkgid="0f7e1cd3aaaaa3a2add070a0178cf41e9bcea3905461abafe8229783353e2c03" name="assimp" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="7.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-6" date="1743508800">- Type:CVE
- CVE:CVE-2025-3015 CVE-2025-3016
- SUG:NA
- DESC:fix CVE-2025-3015 CVE-2025-3016</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-7" date="1743768000">- Type:CVE
- CVE:CVE-2025-3160 CVE-2025-3159
- SUG:NA
- DESC:fix CVE-2025-3160 CVE-2025-3159</changelog>
</package>
<package pkgid="6df431d65bab741425e3464f91385228cfd1ee96a8a896621bde2460e42f350e" name="assimp-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="58d9f16b701e1aa6446e0a68958e8cb3b8eca135978743080f42e8eb24b91aa7" name="assimp-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="7f9e959c61d26e1360c22c8f3f9b830735208950622a9347e5eb85f3663b732a" name="assimp-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="9562684caa2901485e2704126c0f968685d9f766fca97b3d0748e0aa4b18dfd6" name="assimp-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="5.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
</package>
<package pkgid="9efbd058c4a52f6b87006b952b6f11ffdacbbf9908f468599c7192db3ad54ee1" name="assimp-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="7.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-6" date="1743508800">- Type:CVE
- CVE:CVE-2025-3015 CVE-2025-3016
- SUG:NA
- DESC:fix CVE-2025-3015 CVE-2025-3016</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-7" date="1743768000">- Type:CVE
- CVE:CVE-2025-3160 CVE-2025-3159
- SUG:NA
- DESC:fix CVE-2025-3160 CVE-2025-3159</changelog>
</package>
<package pkgid="9a0a3479df39dce3b13e9dfb8e7bd9f45d3312d50e936ce5e835299ee3c03417" name="assimp-debugsource" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="92408e80c5af52b29ea4e393b0900b20590f84e24df7fd9540df6036aa036267" name="assimp-debugsource" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="5f688b58e8a1af8cab6dcc3f0fa51ba50eb1371b6b0f0d0861614a63caef775b" name="assimp-debugsource" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="88f7ba98a58b6c6f4c34c5b9b776cde54f2dbaa85508ff2595fec727223783cd" name="assimp-debugsource" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="5.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
</package>
<package pkgid="7254f9f2ad069ad538a861f6965aa25f9f1bc3aeacb59867b1d486e16af9cc97" name="assimp-debugsource" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="7.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-6" date="1743508800">- Type:CVE
- CVE:CVE-2025-3015 CVE-2025-3016
- SUG:NA
- DESC:fix CVE-2025-3015 CVE-2025-3016</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-7" date="1743768000">- Type:CVE
- CVE:CVE-2025-3160 CVE-2025-3159
- SUG:NA
- DESC:fix CVE-2025-3160 CVE-2025-3159</changelog>
</package>
<package pkgid="09a4763b03b6126ff5644ad0e8fbcd50f69cf298420145b404a77669b8527b03" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="b3e394b17c2ff00150c050bbf76d64232829928ed0eccbf6f335e9e7347f3074" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="192188a8d982e8f6c0b993dcb2bcf801e1cc808f866db89880058a098137f841" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="03cee97bb9f0665d0b37d59d0fbadd3314c9f71530da3f620d7ac6abd60b9d06" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="5.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
</package>
<package pkgid="57851d94d374f3090cbbeff897df8f556f139a6a6ee71d191cb2057029f85e2a" name="assimp-devel" arch="aarch64">
  <version epoch="0" ver="5.2.4" rel="7.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-6" date="1743508800">- Type:CVE
- CVE:CVE-2025-3015 CVE-2025-3016
- SUG:NA
- DESC:fix CVE-2025-3015 CVE-2025-3016</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-7" date="1743768000">- Type:CVE
- CVE:CVE-2025-3160 CVE-2025-3159
- SUG:NA
- DESC:fix CVE-2025-3160 CVE-2025-3159</changelog>
</package>
<package pkgid="3b97c37ba614f0112fb1bdb6b808c4cc7bea879409726da92bbf35019a5b1d91" name="assimp-help" arch="noarch">
  <version epoch="0" ver="5.2.4" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
</package>
<package pkgid="ca30e03960512402d4811439bceda983b93406b30853e060f91bc6ff57f9af3c" name="assimp-help" arch="noarch">
  <version epoch="0" ver="5.2.4" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 5.2.4-1" date="1666008000">- Upgrade to 5.2.4</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
</package>
<package pkgid="69e345a8997c0565ee2489c28d5c135748d21a85d8eae6da999fa33aa0a94cb9" name="assimp-help" arch="noarch">
  <version epoch="0" ver="5.2.4" rel="4.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
</package>
<package pkgid="a56f800edc3d19f44b269dd280ec0345eceff32c3215fd71742a73fea2a726be" name="assimp-help" arch="noarch">
  <version epoch="0" ver="5.2.4" rel="5.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
</package>
<package pkgid="6a38205f15bb70f6805cff30c44b533c40dc5abb6adda77ea4333a5b6e78c139" name="assimp-help" arch="noarch">
  <version epoch="0" ver="5.2.4" rel="7.oe2203sp4"/>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 5.2.4-2" date="1721649600">- fix CVE-2024-40724</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-3" date="1726747200">- fix CVE-2024-45679</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 5.2.4-4" date="1729944000">- Fix CVE-2024-48425</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.4-5" date="1742472000">- Fix CVE-2025-2151</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-6" date="1743508800">- Type:CVE
- CVE:CVE-2025-3015 CVE-2025-3016
- SUG:NA
- DESC:fix CVE-2025-3015 CVE-2025-3016</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 5.2.4-7" date="1743768000">- Type:CVE
- CVE:CVE-2025-3160 CVE-2025-3159
- SUG:NA
- DESC:fix CVE-2025-3160 CVE-2025-3159</changelog>
</package>
<package pkgid="b4768e7dd496fa51e0cde0b8ec2d8fb2100962b81040f3d15622fc21dfc5681f" name="atf-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="5b4939537d5c669d19aef1ba2b0390e8fba45a51efe3318928604aabc027aa9b" name="atf-debugsource" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="59740e5db2ff40f3936f2c606132803b63a09b2dd907ca6d2f7f038cced82c52" name="atf-help" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="7309caa15d30e5665932be0c0d790287a3e810c4cc89f3bc3078e1f6cd8cc8c7" name="atf-tests" arch="aarch64">
  <version epoch="0" ver="0.21" rel="3.oe2203sp4"/>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 0.21-3" date="1727611200">- Replace auto_ptr with unique_ptr</changelog>
</package>
<package pkgid="cbe77c52e89eace9e3053422b8e87afdbe19c9f3ac2ef0420dce29341337bd10" name="augeas" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.13.0-6" date="1743681600">- fix CVE-2025-2588</changelog>
</package>
<package pkgid="68b4bcdaafb27f5a36116ed248bb5f104d636807413f1472826bf9a63faadb22" name="augeas-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.13.0-6" date="1743681600">- fix CVE-2025-2588</changelog>
</package>
<package pkgid="8430f4266d6379b3f63478adc5d3aab337c155a98b2a7ba134f44f2e7e46ee40" name="augeas-debugsource" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.13.0-6" date="1743681600">- fix CVE-2025-2588</changelog>
</package>
<package pkgid="51a914ca43d7319ce0de61ee84b924c8d7dfa59021e1fe4dda5da4713949bda9" name="augeas-devel" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.13.0-6" date="1743681600">- fix CVE-2025-2588</changelog>
</package>
<package pkgid="d8ab48c3e1d7bfa8dcce958294aaeb8ca25bd2cfd52097988170d160e0c52157" name="augeas-help" arch="noarch">
  <version epoch="0" ver="1.13.0" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1.13.0-6" date="1743681600">- fix CVE-2025-2588</changelog>
</package>
<package pkgid="56ea2f53506ab50d94e61f82a9537a50c0e1c2bae5ba72a921453b5a112226ca" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="01ea10b610b6723073713aaf1db41a3aad72b69c5ef187bad861ddcb7dfb500e" name="avahi-autoipd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="fdf8069d77e1e127d2ae63800e3d37710b3940787b03e3848794b2531967a3ca" name="avahi-compat-howl" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="4fb083c06355dfd5a0dd5ab8c11ad7a4d46379b69341d0f8e5621c4aa1db29a9" name="avahi-compat-howl-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="5b7b3118cd0721a35b7345493e1360370672224b7dbe54223bdf4fb614386fa1" name="avahi-compat-libdns_sd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="6dd8ab7c9528f362baebdfb81b0cd2bbb7cab8d2434062799c29aa0819eedd10" name="avahi-compat-libdns_sd-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="35eff851517e4153d5ca2abfeea0cd1a62e25cc13b65f9b397496c9afaa56efb" name="avahi-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="f42cfb3ba696887e6915b22b9d7fe0167bba44bedaf7ea5cd7b4de235919807a" name="avahi-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="aeff0a4679cc644dde45f490c8345a5e7d2bc573f0eb698287af6494e39bfd82" name="avahi-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="dfd13de7d9cfde2ee5a3dcc7964ec1a26ac1780aace26fcf83fdf4344a1e1a32" name="avahi-dnsconfd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="447f69dc6232093965b6c2359b4c6f8fa970641b05d92b7999c2d9b7cf33e4d6" name="avahi-glib" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="0d0ecdad33dc9bf0c0479e0fa32509a3a5fe9a4fe600b07e25c6615136d3588c" name="avahi-glib-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="69b34b74cbe7abf882f6351de7c360af96bd3a4dfd8bbfdadee8f6afb48ca0e4" name="avahi-gobject" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="0b9b94f24b2dcf9e75ace48536eb7ba09207891cd9990cefa41a7b663628c2f0" name="avahi-gobject-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="40b4e67884da772ac2cd38a58f21c4b6e2697f16540f17a014a9b530d082260e" name="avahi-help" arch="noarch">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="ab0159f4b91a99286c47bba1a7523de9f35f8066655b835b3bc9f2526b003f40" name="avahi-libs" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="5505f39b81ee39702d40da49cb5dd0b71da44324cd69df2d1f3284b6f3ed2a1d" name="avahi-tools" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="a1e79389c4a66864ef65aaae3662e651ad8f5856e76f960b2a4b5ff3ec87b9de" name="avahi-ui" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="f950009db700be76d9319afc76b1646db202de49d126ab066f4c77442c2ff879" name="avahi-ui-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="f6e21b4f9a02cff226ecf7e9953cb7d31010a23342fa86625adb0b48ca576eac" name="avahi-ui-gtk3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="732a83cdd88cac4136e858b48b211a8c1ce5237827052c3a799d3954cb978e3a" name="avahi-ui-tools" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-17" date="1697457600">- fix CVE-2023-38470</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-18" date="1699272000">- fix CVE-2023-38469 CVE-2023-38471 CVE-2023-38472 CVE-2023-38473</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-19" date="1707048000">- delete redundant patch</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-20" date="1719230400">- disable avahi-daemon.service default</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-21" date="1723377600">- fix wrongly splitted tools and ui-tools
- cleanup spec</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.8-22" date="1745236800">- move autoipd user creation into autoipd's pre section</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.8-23" date="1749729600">- fix installing avahi-ui-tools but installing avahi package</changelog>
</package>
<package pkgid="cbcf0bb68b2d59233da98602c0cadaaa542f8f3761c35d809e7a216acacb3ed8" name="aws-sdk-cpp" arch="aarch64">
  <version epoch="0" ver="1.11.327" rel="3.oe2203sp4"/>
  <changelog author="liuheng &lt;hengliue@163.com&gt; - 1.11.327-1" date="1730980800">- Initial package</changelog>
  <changelog author="liuheng &lt;hengliue@163.com&gt; - 1.11.327-2" date="1732276800">- fix bug</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.11.327-3" date="1732708800">- adopt to new cmake macro
- split out devel package</changelog>
</package>
<package pkgid="a23298838a8490c99016f7dac9630defa0ef8b9cee4c2fe6fae9bf5863b6b191" name="aws-sdk-cpp-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.11.327" rel="3.oe2203sp4"/>
  <changelog author="liuheng &lt;hengliue@163.com&gt; - 1.11.327-1" date="1730980800">- Initial package</changelog>
  <changelog author="liuheng &lt;hengliue@163.com&gt; - 1.11.327-2" date="1732276800">- fix bug</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.11.327-3" date="1732708800">- adopt to new cmake macro
- split out devel package</changelog>
</package>
<package pkgid="a9b38fb8b2d06f8528bf0b33a0f585a280e52da7f65ffda90e806e6122651123" name="aws-sdk-cpp-debugsource" arch="aarch64">
  <version epoch="0" ver="1.11.327" rel="3.oe2203sp4"/>
  <changelog author="liuheng &lt;hengliue@163.com&gt; - 1.11.327-1" date="1730980800">- Initial package</changelog>
  <changelog author="liuheng &lt;hengliue@163.com&gt; - 1.11.327-2" date="1732276800">- fix bug</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.11.327-3" date="1732708800">- adopt to new cmake macro
- split out devel package</changelog>
</package>
<package pkgid="1581b21d29b4c0fea61c8e3d166db714043aec6886e8b97d74d9e064c63dcc85" name="aws-sdk-cpp-devel" arch="aarch64">
  <version epoch="0" ver="1.11.327" rel="3.oe2203sp4"/>
  <changelog author="liuheng &lt;hengliue@163.com&gt; - 1.11.327-1" date="1730980800">- Initial package</changelog>
  <changelog author="liuheng &lt;hengliue@163.com&gt; - 1.11.327-2" date="1732276800">- fix bug</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.11.327-3" date="1732708800">- adopt to new cmake macro
- split out devel package</changelog>
</package>
<package pkgid="cb0fdd1676bac87562982115aec992cecf54c239ac3870957fe4211b6dd17aeb" name="bind" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="e803487d8a5404c43e68b3561662e0abb255bf30c4d4152261e4a86a6bfa34c4" name="bind" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="7e53ef703e13c8832d13e6c28b732bf9f888d2e9e3d46e16a5f26caee82a49a5" name="bind" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="da136a306f802f6c17df58a93ffa38c0a1d863f1def39728919db208586092f2" name="bind-chroot" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="17afea45f4a9af3b43bdc1a954692cee3adc02ab2d95f8cabb987288b8e0736e" name="bind-chroot" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="6c7ed0eebb40b9ee20ed41e5d01a0946bf9145d39fc8acb7d3725211b7422cf6" name="bind-chroot" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="33a2d2fb8e9f950d89313ed786073f200681313af005814926fccb1b77397756" name="bind-debuginfo" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="4563a958078e13a3f77a181cf9b8e2ac9655a81d2424533f4d0f1ead32914e1e" name="bind-debuginfo" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="ef7127407ce9f0048a81b8c58efe5883bc7441f7cc59ee8b4c9fcfd9a4bda3eb" name="bind-debuginfo" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="5ddfc8c9c83f4afc637ee4be750c9fa9883ffcc79fcfd8985c1dcece43b047bc" name="bind-debugsource" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="fd17ceee474df998776b853a5f627066e8f720c41b9d958ba7c7ffec51799af8" name="bind-debugsource" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="ff568dd2a110bb97a71a6ea6f854f354e7db3821ff60bee608588634b5b61a1b" name="bind-debugsource" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="138aea5d6859fec1e48976edad9c6a6f0bc3e8e6bf0c72925e70d499d1187827" name="bind-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="3d2a86c81d928002587556ef5300a4eec9792231e9fe7247a8d40c7f98c3369b" name="bind-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="6cc1c1cd8945cdf713e17fc0e0c72ec1fd09ff451994e583a2c10b55f46d67ac" name="bind-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="70d10e59017a96b94dfe4bea5a3f02020f6d5aa0eea104056be6dfc86ac5fc22" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="eb2e569bcc644e4c4200e212e7f7d490ea7b854dd0eb2358a684d72bbcfe278d" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="df3da87bd0e8cd1605fc40a21806d9fd7c66b4a9b1e93295558d20819d531391" name="bind-dnssec-doc" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="9ec1ecf4b4241c26e8b4bbcb186adc477b266a16678e89c88c280edefc6b7340" name="bind-dnssec-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="30d07374e8cdc081ef5c250d8bc89098f0ed8bad0049b33089975c986d5433a7" name="bind-dnssec-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="fc838d4f28267d4dd59468a314e2d1fd8584413c1b6e3cf79b8a76a31b61a5fb" name="bind-dnssec-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="f386a816129d38ff16e1d8e7673062fe6beb9254987e5fefd18baf1292b5181c" name="bind-dyndb-ldap" arch="aarch64">
  <version epoch="0" ver="11.10" rel="3.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 11.10-2" date="1710936000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 11.10-3" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failed for bind CVE-2024-1737</changelog>
</package>
<package pkgid="b23f2f340bc08fde1e4679a9bb9a093f3ef252168615168892b283649ee5105d" name="bind-dyndb-ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="11.10" rel="3.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 11.10-2" date="1710936000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 11.10-3" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failed for bind CVE-2024-1737</changelog>
</package>
<package pkgid="3bea01e04e0b5f205b819327b66d64b7eccf9a28faae2a283c999691073caf1e" name="bind-dyndb-ldap-debugsource" arch="aarch64">
  <version epoch="0" ver="11.10" rel="3.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 11.10-2" date="1710936000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failed</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 11.10-3" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failed for bind CVE-2024-1737</changelog>
</package>
<package pkgid="6e67e439d87d99e5c1762499c162dba4793d7e5a407e5f20431adaec8c60efb3" name="bind-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="641f1376a0da189d5e4fd15fd332dd54e83599a8aca1b50622fad36f6a284d04" name="bind-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="8758e7fd6f8c302c9e75fe6e7ebc8ced0bcac00724e4ccdbc0e9e3413eec779e" name="bind-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="8f30c24d849c4d59b5bdbe59a0bb9bedb7b12363887258eab8eb516300e36a5a" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="b40bf9663d50aa80b976a99e3264f1668c4849053f6a2a4ac842a14f6e5defdc" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="3422d25e6e74416f591f0e934371b8fd39795c79af9270a9518ebd00f8ee9a4a" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="78913cb3e6273ceeab5cadc65b2123326f4793d65cb70be1d376311e71142b3e" name="bind-pkcs11" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="1760753ff96dd4135ee13701fb5e6aee176c603b7d8f475f6de69f13877612b6" name="bind-pkcs11" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="c2aa323cd09416d6c9537ec3076c09d85a13a86b90e9996c9b6df02ee82ee0db" name="bind-pkcs11" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="4eedb69f8df63a7dfd5c5483448656ba3c3a5d907d555c6cc3e19da1cbaa4e3e" name="bind-pkcs11-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="4bc18243b793a04e06989a5934b10109ff6da0cba8844ade574f1e8720f481ea" name="bind-pkcs11-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="908034ab084095c3b7abc1048c94afec40669f355acc754efee402d41334dde6" name="bind-pkcs11-devel" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="5ed94e9a16724045cfe8b5870a6fa68cf6bd446ea537c66f09c47e2bee38d0ec" name="bind-pkcs11-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="92fac552a3d30fd9943c00ebc4f0a2bfbbfdc363257bf4e7457089167822ca63" name="bind-pkcs11-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="e2e1bff8fadd219f93b32f165386609ab6992f70cf2f7549c80f9d75745c8c90" name="bind-pkcs11-libs" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="35aaf1317d2231f35228cea2de63359d57289329138dae92b8f7ad775df86e8e" name="bind-pkcs11-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="18fe303ae4ed00be197c64ec232db440b8a14a7f0d796d6de9568dbb7c9b81d8" name="bind-pkcs11-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="e6e2aea72914b05cf6a00509f9245ca3baf9d1b7e1a008d6357ad9c946c571b5" name="bind-pkcs11-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="68c29d5df43d224dbbf91050422a079e3d779efefa52ba3c356242168e6cef83" name="bind-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="23.oe2203sp4"/>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-14" date="1675425600">- Type:CVE
- CVE:CVE-2022-3736 CVE-2022-3924 CVE-2022-3094
- SUG:NA
- DESC:fix CVE-2022-3736 CVE-2022-3924 CVE-2022-3094</changelog>
  <changelog author="zhanghao&lt;zhanghao383@huawei.com&gt; - 32:9.16.23-15" date="1675944000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix output expected information when install bing-sdborbind-sdb-chroot</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
</package>
<package pkgid="6cff9c908e6eb75d5b9123259b90b20cbe4ec4237b15e07c0e3d094084b1a9c5" name="bind-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="24.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-16" date="1677326400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: backport some patches from community</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-17" date="1681214400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: Don't perform arithmetic on NULL pointers
Accept 'in=NULL' with 'inlen=0' in isc_{half}siphash24
Fix a use-after-free bug in dns_zonemgr_releasezone()
Fix dns_fwdtable_addfwd() error path cleanup bug
Detach the views in zone_shutdown(), not in zone_free()
Detach the zone views outside of the zone lock
delay trust anchor management until zones are loaded
In hmac_createctx free ctx on isc_hmac_init failure
Fix dns_kasp_attach / dns_kasp_detach usage
Fix backport error in 84929d1c
Fix a cleanup bug when isc_task_create() fails in dns_catz_new_zones()
Searching catzs-&gt;zones requires a read lock
Fix view's zones reverting bug during reconfiguration</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
</package>
<package pkgid="22c653dc312326ed8950d81aaf279a7eabcfcb3c14fd8ed01f5a4aa01b70285f" name="bind-utils" arch="aarch64">
  <version epoch="32" ver="9.16.23" rel="26.oe2203sp4"/>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-18" date="1687780800">- Type:CVE
- CVE:CVE-2023-2911 CVE-2023-2828
- SUG:NA
- DESC:fix CVE-2023-2911 CVE-2023-2828</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-19" date="1693828800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Disable the internal memory allocator by default</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 32:9.16.23-20" date="1695470400">- Type:CVE
- CVE:CVE-2023-3341
- SUG:NA
- DESC:fix CVE-2023-3341</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-21" date="1710504000">- Type:CVE
- CVE:CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868
- SUG:NA
- DESC:fix CVE-2023-6516 CVE-2023-4408 CVE-2023-5517 CVE-2023-5680 CVE-2023-5679 CVE-50387 CVE-2023-50868 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaweic.om&gt; - 32:9.16.23-22" date="1711022400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:update release version</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-23" date="1722600000">- Type:CVE
- CVE:CVE-2024-1975,CVE-2024-4076,CVE-2024-1737
- SUG:NA
- DESC:fix CVE-2024-1975 CVE-2024-4076 CVE-2024-1737</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-24" date="1739966400">- Type:CVE
- CVE:CVE-2024-11187
- SUG:NA
- DESC:fix CVE-2024-11187</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 32:9.16.23-25" date="1745409600">- Type:CVE
- CVE:CVE-2024-1737
- SUG:NA
- DESC:add max-records-per-type and max-types-per-name for fix CVE-2024-1737
       The default value both of max-records-per-type and max-types-per-name is 5000</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 32:9.16.23-26" date="1747742400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix build failure for bind-dyndb-ldap</changelog>
</package>
<package pkgid="4d563bc4da3607b1f737fd5ab4bc5fd4c32209356088af2fb58641df387d522e" name="binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="30.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
</package>
<package pkgid="8bde5547077b96d02a3302f25b0586582a6d12f4537ceed1b7e9203b5d9860f0" name="binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="32.oe2203sp4"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.37-31" date="1737806400">- Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
  symbols without version info.
- Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.37-32" date="1747915200">- Fix CVE-2025-3198: Memory leak issue in objdump</changelog>
</package>
<package pkgid="05c1f15c4393f94f821cc41839d2854d6f99fb5dfe5a99ca3fb76226501f9eca" name="binutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.37" rel="30.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
</package>
<package pkgid="7ce20484b5cce00b8f34f89f7c892a3d565fc9fbbe4d9fe6801f9fd28a98be75" name="binutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.37" rel="32.oe2203sp4"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.37-31" date="1737806400">- Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
  symbols without version info.
- Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.37-32" date="1747915200">- Fix CVE-2025-3198: Memory leak issue in objdump</changelog>
</package>
<package pkgid="feadebcef2b427c9f7c1533743ccac621ba2c64710f9b1ad33da9bba9e9db8a2" name="binutils-debugsource" arch="aarch64">
  <version epoch="0" ver="2.37" rel="30.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
</package>
<package pkgid="4ca2c8652839a3c384719af1827207b63fbda4064570a01ec11f419981f41182" name="binutils-debugsource" arch="aarch64">
  <version epoch="0" ver="2.37" rel="32.oe2203sp4"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.37-31" date="1737806400">- Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
  symbols without version info.
- Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.37-32" date="1747915200">- Fix CVE-2025-3198: Memory leak issue in objdump</changelog>
</package>
<package pkgid="3d4f4845fdcad10febc9d82fe722c0584f1644bf3ae11e239b8cd0cfee3eeedf" name="binutils-devel" arch="aarch64">
  <version epoch="0" ver="2.37" rel="30.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
</package>
<package pkgid="e913b3c9c2f696438ea32370ffe015ad212c8ef83423a1e60d5ccb049b1c6553" name="binutils-devel" arch="aarch64">
  <version epoch="0" ver="2.37" rel="32.oe2203sp4"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.37-31" date="1737806400">- Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
  symbols without version info.
- Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.37-32" date="1747915200">- Fix CVE-2025-3198: Memory leak issue in objdump</changelog>
</package>
<package pkgid="4a63052f6d8e54545e759d5fbd8259ee32a108514c8cddfcd4e6167dc02f38b7" name="binutils-help" arch="aarch64">
  <version epoch="0" ver="2.37" rel="30.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.37-21" date="1693483200">- fix CVE-2022-48064</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; -2.37-22" date="1693483201">- fix CVE-2022-4285</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
</package>
<package pkgid="26de3929786af157a0100d1562a2659876ee5d7a3311e72764e3291cf0ed9450" name="binutils-help" arch="aarch64">
  <version epoch="0" ver="2.37" rel="32.oe2203sp4"/>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-23" date="1693915200">- Delete post, preun, postun for help package</changelog>
  <changelog author="yeqinglong &lt;yeqinglong@kylinsec.com.cn&gt; - 2.37-24" date="1694088000">- DESC:Add sw_64 support
- DESC:Add LoongArch support
- DESC:Fix LoongArch PLT entry generate bug
- DESC:Add .equ support for LoongArch and fix some bugs</changelog>
  <changelog author="luguangyang &lt;luguangyang@xfusion.com&gt; - 2.37-25" date="1703505600">- fix CVE-2022-38533</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 2.37-26" date="1709899200">- Support AArch64 SME</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 2.37-27" date="1711022400">- add ppc64le support</changelog>
  <changelog author="yuzeyang &lt;yuzeyang4@huawei.com&gt; - 2.37-28" date="1716984000">- add l4 support</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.37-29" date="1727092800">- DESC:fix ref leak of names of newly-inserted non-root-visible types</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; - 2.37-30" date="1729598400">- Add sw64 new processor support</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.37-31" date="1737806400">- Fix CVE-2024-57360: nm: Avoid potential segmentation fault when displaying
  symbols without version info.
- Fix CVE-2025-0840: stack-buffer-overflow at objdump disassemble_bytes</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 2.37-32" date="1747915200">- Fix CVE-2025-3198: Memory leak issue in objdump</changelog>
</package>
<package pkgid="2caf3ef57476586187a9be3f293e39f5a2b387caf776edc5a834b468ad2817df" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="ce1f17db9407b4a9cc26f9e21009bac8e92eac9cd97390d802aace5012299c10" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="e344c9e9e3a29d8950bd7934281d523dc579e79368d45cf1510bf3317911714f" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="27eecf971c84e84b9c0cc6cb1c576a8cd1777ed11ae67d720b45528fad7c8f2a" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="5a88b54d5f9c03d6d2c5e327ee677908a9dec618e04543e4fbc23eb7153a8792" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="f149716c9fffe46e5000c5a5d74bc202e41dd284a9fc205083d72689c43137c1" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="0f91698077db77ec456b2d2f756f5d9027cd9a95eb2e84a848123dc563027cfc" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="492a428c1592949ef8d6592eec6f1632ed807538a1389f925401ca44f4ed8fe6" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="5d1fe6fbac8add0a9955ad75442076f9c21225ae04dd5a0a6d3895ed040899f1" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="aa269deaba8de00090d3ae50b560d2036f12797d1d06381482c052c2b8bdf66e" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="daf00ffa7d4081eed5181263bf8a73a05b88ea70002f815f29c36b03a33a7a6e" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="30482067fab5ba4fa79883ea550dd709981d6dc14e7d385271e1f385a4016bf5" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="8108b4356081a564e69630f328912c371eb0e8bf6e4d49569818a6ff95dbca39" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="76cb0b666c92bb982b62dd76634b78d1a561cd73e41f936a7a0398adbc488230" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="11bac7406e8957b53d2badb5e451f26f07ccd5a75aa558c9df309dfc51320ce5" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="2b6abd73405bab36cc9c45c18203bfcb46a5e08abf848b864bd08ceb68419b81" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="2afd36a46b7663e1093cb17757853df69e8c41d20e7014e7f2a41e4362dc6a41" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="2dd465983094ee85b5f61bfbdb7eeb75728f1c23786575cf1935a23c78b57d79" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="3c21633396f7fa10a01c47fe8081d92377b9dfc931a7d3ec71a5df011122c10c" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="51957bab544327d0b2944e7e9c22c01e539cb24c52372648d7f266fa650c0702" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="19cfb737a2a997bbb4cd89c3ed9e1203d42701b009c2eaeaf02d3e8bf90428c3" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="6657ca0e6b2bd3c98d03f148384dc44ca4ebe5ae36704e3284c51f10c5d8c644" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="4950b429bea6b76afc7fad5305afc05499cee4c316c421652867213638706627" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="f2130f0f6dcd75dd688a4f7588683c62ff7a175ca204a465922c1a97ae1807e9" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="ab3bf0020bb3b7d5e65f235fecf555c42f999a6b87733ee86a870bc2d4956d4f" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="3b482fa7979332bb8d4d6f8dcbcd974732871a189f1a4eef325b3de405bbf78f" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="84d3e750e81ca681b7ce486bf245c129596ef7ab2ae8a756e7d64086b891f8d6" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="9501e1020439825b18551bfd90bcf9a629ed4d1f31d2891fadef5523088c725e" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="0caac3c02dcd56c6aa4ca4fc66aba6a40bd768e10b584c572928e6da4a57e096" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="f92126105971130b24610ebbb7b7b60357f2c39edb7db09c495a84322930b853" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="2d313c564dc8c88cdf1ebb2757857e19079a955a56dffd4efcbf811fdd662397" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="1a8877cf8d24de57d277fc8fc6786db9b9514b03fb9a20a5e8c4e2dfcad429ed" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="e26d637597f84fd890a4d83f6de191de8ede48827592b2444168189034295da0" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="70b8fe627087f980b233e7be8d35d6f33e025570f7aabee607713827ad2bebfc" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="d66651d0c519055f1c0c73d6e1eea944922ec9770aacae9846fac656513b5473" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="d12065d604d597fe72c853c868f87e27d4f2bae1d5698023a7ad2d12255a376f" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="44e8e9e749a1b7bc1b2653ff4bf1f540458b2bc14b3a415ac0347145b792823e" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="c6b651a53e82ec9ca3fb3089853a8d86b2c6fee9f4b8896e258e147cb984b6fe" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="bc72aac11cc52966dfba0a34e44849255f413db9e7e506dff23f2e82545ab7c2" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="8e3ab4bdc2670b48dfba52e6362239171065758f3b55a6d412ad5e4f3c00a8c9" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="8aec0b538482ce0459572d632d448f12634364aca1138628d3970644e38cdc12" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="0430785696e99264729e6a7a166f5c407b2e9239cace78e777fd264688e2eadb" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="1c8b913a17c317ab7339beae1b3e71a3eae675f5556932f5ec22423c95cdc928" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="a7660e3bc6ae8e22aaf93203f2650aee7ca3883c503608afdd6553c40923e190" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="e6ec1db1e6074f1be6c234446e6ed8b2645eee6b6885fe0bebd7906717499420" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="a929e3042809c3bce33e420d430ab286380afcdfe25c6810b2a4ea6b87ea86f2" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="be2ec66e26fbec4e32ed621401febec77318b91f3e14e066ee44836da1c5c108" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="93973453c744990af2c5f968a0c357934fbe3c0525de57c0c559a1ab1e03c535" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="a9d8633b58433a172d5d1afe3154de20673bdb1ff8abf2eb816f9fc96afa8f94" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="d5d1dbb6751e8bd06e9a51634b887d557e29ad41eb5d6a1379f354763bd8b321" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="44b8c6345b9cd69f6b48cc6d38eba8f58156cb4570593c7654c53554708b76d6" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="803b9c789c2a40263d033df6e35a4a4132fca944e02217da6d2878b6625b4fda" name="bpftool" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="3647ebb630bcee3b731322b703ccae376112490d070e821ce265b2f8aed073da" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="23dcf1f07bf23ae3f204f9b38c6abe28e01592ce7c50c7cb34a11c52fbb552bc" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="c8d1599286f1a0ccc560d3825029aec115af00fa7a02183232630e3143d1a680" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="c2f1bfb6fd5d5b62708927c78304148569940f4437d415626a3caeaef0762fc4" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="331a7ab14dd6bcf782dcdcd7caf9f026889d54f6755fc1445113304cb09edd88" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="9335469d65b8a98efee478f245f5129925e062918bea0f47cc7f49e201a5d1e5" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="cdd53ccb89aa222cd5a30d5b1aff6256edc88186fe17e0d49b74c2cb6d863dcc" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="2a58482db7276801e0b4fe8d92d51b43b55b2843011ba16fa807e5ded60a3243" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="29b3aae8edc092491da35a4509beccff435ca9da6211e8f330af4735bab6f91b" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="a4b2bc871f2c0fdf99d2fa9e26a2fee44591544fc97df9d95c5b3ec614e370c5" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="43405b48dd8c7b5414b2e2e8d5831e92dda3e5dde63df5422c2925d516e671bc" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="7e4d3e4af9fce5d77377dd75288ac4094b08ff281a72ad5858b0f0182a3fbb73" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="bfd0084445b987a5c8e893b40d33896e13f4b689f8e3d7bdd8d2b1fa77bfc4a4" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="c0edd4064fcd2b93cb970f90333b31a0953ed4a482442ab0c0aaa02f3771663d" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="cc2854c0fa00b3b421384eab72ed88c1d188c541236ae325a9987364377a3d57" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="56514f8a537f43befff988f5d0f1e6ddc5123128d36f0e049ae3b4fb53e79077" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="1d48f0ee2392f5fd6ab32f142ec7d82319c67fbbeaeb34ea95714f2d41d18e34" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="bab0ffcfab3984bee266ad40a4389e289e7b619e8e0a5ae2c79e6092dace016c" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="04534e94366d7b5b62f24512e928bd78cf3d0e3897fc0dad48bacc3cb85bd97a" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="d0185ecf6d8fe000f6cce7043e0ff6dd93b0a503de0023b1ef228880645a9769" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="0c2bd1e72a1fba35e4b7f50191d8c27a6be3ed442b5b332e78ed99bdb7463b0f" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="169db3e842f322dcf4d9dd12adaf5acd651a772f4bf1a1a68793e236285b6366" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="02f881e3e3a4129d8b975fa24dcf281f07b54588e38dd255c79fbc7d7ecfb3c6" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="b95fe0effb5eee0b5c8d3ae03e991125f8470db1fa1029b6d3126a60d17b8a15" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="92fc0a889b40bf67b4a0e30d39a27a8b3bc5d9657fd25c6ac669883ff28413bf" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="2e428e86b96eebc83099d2139998a547d41dde17f697b6d626edbe13b257203b" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="29b4001f0440f29cd46fbb5f3b36c6c07c1ce9a77df1ff84bcaf1991e8c2445d" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="d4bcb94fc67d4b6816cbcb715690d03a28224d018123fb2df1f5a96b59c6fda9" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="b29efcefe6e4c162463da59f926ba03c0e9ca4ee3954efeacf2d150fdf84aad4" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="b2b065bb0688025a889d63b59ac82c35f56930e3715a90a7e2da9c68e20cf82a" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="afb64722ed011e35e20d680f09977d423152d4d3efd71bd340ae1ea52f615a7d" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="fd3e2838903bfa4f63e8944e820377de8a159febb4d94542db0c3d687d962e9a" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="d9f4f6480663790c5540248473aebb608426c30d122ec1c52df2e67581753002" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="64257a4dfb569a851cee044a9faa43927cc4337d31278014005fdf2cdaf0bc64" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="e2c7e99e2caa3059448d5c3a13e30587574d17f3c326545f6323627089e4f09b" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="6303b2f99808ba2fa3be2cf2bc3b778228ba435f0ee9e69a1673e3e9a56cf2bc" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="6a16067abc9a73c83256827e3d015054b0b4d0a90d76926106e0ae38a3a7fcc7" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="1ab58a1acc1edb92ffdca8bf86ebb7020538c6156c1587cd2a3d916244041f4e" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="be04b8bc7870bdd8d74e369e8a282f12711146245939daeb7349f2222bfb095d" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="4ecd64a2f0f6dd25b96312be2e15eac56887720439e77269b696c2f96b9e0268" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="cad310b1dc16de8fd5f3962a4c732167a1e81fde9ddba90e09ba5a8072b9648c" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="12919a3cb8c36c0f1f4f76badc16ab62125fe9a59b2fc196b1ae424c09de92fb" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="599640f32bf54dd97819737825e0ba8b66973c1b110e6e3fca281eef5c06490e" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="eddd7a96e488685b60fa40a33764849ca5cf80690dc914287faf6dd59baa81eb" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="5c3cbf16d19f7265ffe0d979fddb37e06e1682a6c10b0dcc4686506f4bcf82e9" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="65cf97220afe22382aab74a71efada562436ee29acb84dced29da1b3630a7f3e" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="eb09dfefb7e100009a29ea22f1cde6cf0772428495d0b82412d8a3664580410b" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="079d5c4be74986e12d4289d754a5747d3d251b2773f20c8511b08ef37f885699" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="f901037cdb34be97d8b3c9eb3d6b0725a5d48b9a091d98eb1a1c920e7dea4393" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="34b20b92b2014d5cfbce8f45b3fdd48b83ade858dd650326ff9ab258340ba45b" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="9d26278b13e06044e94f077926e461d72c0eb96e781e84056ad3872eceb5915c" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="b010121ef0e69e6cddb9cd6c10fe543adc4b2f6710c1e0a35f5adc08d1e9e935" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="86d6eee495e62426014d55195783c66a24d5cbf5faa1f34ff68bdb1c21a2909a" name="bsdcat" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="8.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
</package>
<package pkgid="507b691477c91365f0f2fd9d6b58af3ce0c458497f0d449780f0f40d80b9996a" name="bsdcat" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="9.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-9" date="1749729600">- Type:CVE
- ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
- SUG:NA
- DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918</changelog>
</package>
<package pkgid="ec6b267f1dce56d72614d391516089cab1f79fc49738dd14d1dbc855156f0c44" name="bsdcpio" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="8.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
</package>
<package pkgid="c3a9f3fcad32fa979ca40f88393f5653e2d89da1f89c5bcea793987e4b632150" name="bsdcpio" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="9.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-9" date="1749729600">- Type:CVE
- ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
- SUG:NA
- DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918</changelog>
</package>
<package pkgid="3bcdf8823c08c69f1a27432c0f581b53ca1f9500c92e798867e8697f60b59ca0" name="bsdtar" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="8.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
</package>
<package pkgid="1391dcb71dc26914d1d293d42ec24cd542a6d0c692f2cff1a8867feeb5d40ee7" name="bsdtar" arch="aarch64">
  <version epoch="0" ver="3.5.2" rel="9.oe2203sp4"/>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-7" date="1717675200">- Type:CVE
- ID:CVE-2024-20696
- SUG:NA
- DESC:fix CVE-2024-20696</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-8" date="1741694400">- Type:CVE
- ID:CVE-2025-25724
- SUG:NA
- DESC:fix CVE-2025-25724</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 3.5.2-9" date="1749729600">- Type:CVE
- ID:CVE-2025-5914,CVE-2025-5916,CVE-2025-5917,CVE-2025-5918
- SUG:NA
- DESC:fix CVE-2025-5914 CVE-2025-5916 CVE-2025-5917 CVE-2025-5918</changelog>
</package>
<package pkgid="caf3043405b09c9da084ce2df8e5dda799a6ff0023948293425e8a02aa8523b3" name="bubblewrap" arch="aarch64">
  <version epoch="0" ver="0.4.1" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.4.1-2" date="1723809600">- Add --bind-fd and --ro-bind-fd to let you bind a O_PATH fd for flatpak fix CVE-2024-42472</changelog>
</package>
<package pkgid="cd7a7d3026fe36b42bee4071cdb05a34accd76f473b59a8d9bca4968bafcca90" name="bubblewrap-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.4.1" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.4.1-2" date="1723809600">- Add --bind-fd and --ro-bind-fd to let you bind a O_PATH fd for flatpak fix CVE-2024-42472</changelog>
</package>
<package pkgid="2ac84777f3897b905006167c098196da0de03ecb4279853fb25e646a123c4eb8" name="bubblewrap-debugsource" arch="aarch64">
  <version epoch="0" ver="0.4.1" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.4.1-2" date="1723809600">- Add --bind-fd and --ro-bind-fd to let you bind a O_PATH fd for flatpak fix CVE-2024-42472</changelog>
</package>
<package pkgid="f4b98ca5ca5be916cf2eaf76c6a70bcbb322f9bcc0338ac05462f577fcd14cae" name="bubblewrap-help" arch="noarch">
  <version epoch="0" ver="0.4.1" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.4.1-2" date="1723809600">- Add --bind-fd and --ro-bind-fd to let you bind a O_PATH fd for flatpak fix CVE-2024-42472</changelog>
</package>
<package pkgid="9e1a28476f1aad27b9ed32b7bcbbefb2de2561e1ec1f4e9a5737e4088186a4e9" name="busybox" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="22.oe2203sp4"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
</package>
<package pkgid="33d9e8b7ff495f74a2295989d212b1c7625e36725b4c8bf9997778bf834bcada" name="busybox" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="23.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
</package>
<package pkgid="d17fdbc94387c75212722200201a26aaa01e9b44d69f6782e0384bb07684eea8" name="busybox" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="25.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.34.1-24" date="1746446400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-39810</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.34.1-25" date="1752840000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2025-46394</changelog>
</package>
<package pkgid="3d617649eb2e335fadcfa6383512e986e7f0145c056609d0321d342690cd4dbb" name="busybox-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="22.oe2203sp4"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
</package>
<package pkgid="8b0e9600f46d6eadd731dbf815f8634c299675c2a3888c8212b2eae08023c8e7" name="busybox-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="23.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
</package>
<package pkgid="ee1630958def7a4b4276abf105a738c5dfe1a5a659de88e2baa623d4141e273b" name="busybox-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="25.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.34.1-24" date="1746446400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-39810</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.34.1-25" date="1752840000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2025-46394</changelog>
</package>
<package pkgid="daac27df1249e96157a5605973e129ee898de85f12607187c82d496e59bd79e2" name="busybox-debugsource" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="22.oe2203sp4"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
</package>
<package pkgid="9e6a090d9c87f14e8607026de4e0f0efa256945afe47aeb88630c7fa9d07053b" name="busybox-debugsource" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="23.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
</package>
<package pkgid="16c157f5709f91a731d18592049b11676e596614ea091a90b5d2cb8e69a7b02a" name="busybox-debugsource" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="25.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.34.1-24" date="1746446400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-39810</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.34.1-25" date="1752840000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2025-46394</changelog>
</package>
<package pkgid="fa5a434ad39a429b95b3335c384adf5fd6a7bb4d5436bce2a2bb7acfd0548b5c" name="busybox-help" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="22.oe2203sp4"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
</package>
<package pkgid="4e67a1808795085722ce96eab0e093d46905ed2185f454b51d102a3332ab7e11" name="busybox-help" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="23.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
</package>
<package pkgid="18f3d59f01f3b1dff4c3cc06bd852cb65fdd77e7c3b660b3fcf86f030dd1f885" name="busybox-help" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="25.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.34.1-24" date="1746446400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-39810</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.34.1-25" date="1752840000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2025-46394</changelog>
</package>
<package pkgid="c80606a8b5b83cb5310d478ca7a115af408894e0b7fc5540bc7301454ddfca53" name="busybox-petitboot" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="22.oe2203sp4"/>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-16" date="1660910400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-30065</changelog>
  <changelog author="jikui &lt;jikui2@huawei.com&gt; - 1:1.34.1-17" date="1666958400">- fix use after free in bc module</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
</package>
<package pkgid="1f5772c597ca62ba9a856f598ca6292c70f4b815ee19ff892646dd785a66b64f" name="busybox-petitboot" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="23.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
</package>
<package pkgid="faf2b9f681169fae6a54b8ebc5ec2561370d1e257796dc3f4140786f2f397439" name="busybox-petitboot" arch="aarch64">
  <version epoch="1" ver="1.34.1" rel="25.oe2203sp4"/>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-18" date="1693396800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2022-48174</changelog>
  <changelog author="huangsong &lt;huangsong14@huawei.com&gt; - 1:1.34.1-19" date="1693483200">- Type:CVE
- Id:NA
- SUG:NA
- DESC:re-fixed CVE-2022-48174</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-20" date="1718798400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-21" date="1719316800">- Type:CVE
- Id:NA
- SUG:NA
- DESC:revert fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366 CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-22" date="1721649600">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42363</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 1:1.34.1-23" date="1731672000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-42364 CVE-2023-42365 CVE-2023-42366</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:1.34.1-24" date="1746446400">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2023-39810</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1:1.34.1-25" date="1752840000">- Type:CVE
- Id:NA
- SUG:NA
- DESC:fix CVE-2025-46394</changelog>
</package>
<package pkgid="c18d3263dd5b2280aa2fec6197ed25cbd373e8053bdc9b2d7949f6be4a18c654" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.76.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.64.0-1" date="1683806400">- Update to 1.64.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.64.0-2" date="1690718400">- Use local mirror for speed up</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.64.0-3" date="1708171200">- Fix CVE-2024-24575,CVE-2024-24577</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.76.0-1" date="1740398400">- Update to 1.76.0 because firefox update 128ESR version
- Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
- Obsoletes rust-analysis</changelog>
</package>
<package pkgid="45393d62c4b11601fb104506a6be624d5f513524eec21d5bd3057592036fbb52" name="ceph" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="11cad2abe5588088fd0e71a9096c794374c3605209f53084edd35f286ba9d500" name="ceph" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="1557b236729c52d2aece0c9ef2e7c4575a64c85ce3e158a1dac6f2a15ead8166" name="ceph-base" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="cd59dc06df147645a6afec3b41524506bb4f47b130c6896369272a3bfe6b0205" name="ceph-base" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="77174c0dd298b8c8393eda9fd21c1e780acdcf343b4d1f99514c39195660c477" name="ceph-common" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="184ba46fd47aef5dfd82719485b61733471cbd30da95e9a64dedbc472a8e053c" name="ceph-common" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="55a36dd5337c4d9e837d6f38729b8b1613cbf852a6591b4ede2d9e754fe6ea74" name="ceph-debuginfo" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="242d8909e6528dcd9c8ca4948772c6645eef1b3f23334b6aae4754a879597108" name="ceph-debuginfo" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="8db22ed7af0666ebb365bc699d1de6030e8209d7c062bbd7426854182075794a" name="ceph-debugsource" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="4439cc7dbb1eb27171de6044e21a45608b8ab61440afdfc165fbe10f9df8e47d" name="ceph-debugsource" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="7c43aec84a7bf4cb815668f5e2c1d0f2b23132e96956e466923c491769007f1e" name="ceph-fuse" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="08394056adcaaca26263c9ad82bc7e78fa44efcaad823023b3ef7b7339a9ca75" name="ceph-fuse" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="88aa8bec2787121134ad2e0bb5382a2209dc1a28d9387994271d4bbb96fcf7c1" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="d16d29c7abe33b09f795672a14f22e90515906d0d9d57053c0e8f61835cfb4eb" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="9503923e1905253af108e25f7e2edfcc59abeb3b577982ed5d7cf45ee2532ab5" name="ceph-immutable-object-cache" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="2d32d6261a48b0e232037d2f6e7c8de4c399434e39ef66d1a2e700dadccefa4d" name="ceph-immutable-object-cache" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="d1b67f099f78262a49fd4fe9f5c9a16249b3913a1e60c0b1abc5f22965e68ba3" name="ceph-mds" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="1eafd2ce3076431ca3fca2b89f3e41491f82e3abb444bfed34cdd0a62606fbae" name="ceph-mds" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="08c9b46bf9895d23ec208709bb5fd4fc1b921b9429c3d52d2b028563ecc019aa" name="ceph-mgr" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="6fc778ed5be3c64196a3bc6b206b9bd3c88c6f5b9eebab936fce408280023f31" name="ceph-mgr" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="c703076d84f08477b15ce01f2342ef1f706a3533a57b878aa5efbb29d29a5f7b" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="6c533fc7bc8cb049bf0c71a74173d1670e06dd51e6899468701185d979c79c2b" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="4cf9d0084d8b5e101ddadfc6a68c49a8605f410b9928500d15434dd1226bc978" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="48a2ea36c30a9f1e84f2aff2c8bb10649b8a81e6735aa8e1d7f0ff1f78bab04c" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="a925bc3a206a6450280c7ed00fbde99ce992f55cafe9a7efdd20f8c51ef4ef78" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="91cd572b30676528cb1427f803e08010f57164df6f15ce3c950b4d910979507a" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="b9fcac0247702a963c8e54b470542dbc4546cb143a5858b50aa7538112689491" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="967de3831099d1bf873c1b22f065ad5a088fc831b04bae2ad05beb5f6cef466c" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="4fcf39b65df41988fdcc7034e4cbe05dc323bc4965c59f9f012f51c11d5ce8d2" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="1412ee0ec424b08f72818cfeb3bc533778f719d265a64d7bffa8c2a8e77501a8" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="ec2d41f2661ce4d49d473d1b62372d35f40534d6d3398b382520a7f4f3902294" name="ceph-mgr-rook" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="a140f72683fddbaff594f90d01c9bf304457f2819eda053e1bc89fee28997e7a" name="ceph-mgr-rook" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="30d7f0f7fec66956c72b67f2659f6446bc43b4b0bd928fee4376e7d76dacff66" name="ceph-mon" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="3a8359f00457be0002153d019eefadb623b70d56d49de640670353bcda252796" name="ceph-mon" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="ccc598cc5234d4543041495c7b79bd2522841fb0bf2fce5fda89f0118d555269" name="ceph-osd" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="bdc549967ab17139062ceeb9d3df9d2101925c151900b037e7214ba9cbf0023c" name="ceph-osd" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="0e34fc302fe27bcb07a60adb2d523fa63798279c4372e40193c3d15415d722cf" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="34d5bbb02f145d1f8cc9fd2f4887ea4f20ddce3220c2638768bf38e8e4960ccb" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="ae0e73558230a674dfc026d2428427f6dcfb7b46dd87e7131e3c7e4d2b051158" name="ceph-radosgw" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="169320ba65ef211579cde9cb9fdaca75a125dfc0d8013ee1d7992b454473c489" name="ceph-radosgw" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="fc833a71db779b6617ed6f1cb59f64fccca81db0a310ec54f23e1627278e7df3" name="ceph-resource-agents" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="fa13734aa9eda70725aed541b202604a5328db26c9ff3dfa3c18d3b321a17562" name="ceph-resource-agents" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="cd4b7e154166b7b84a5495eb1468da8b5ede1d722ca89bb563e75dfc0ba9b8fe" name="ceph-selinux" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="9b8417d25af3210acf2d4691b6d1554ba8391c8e6584c5eb166a247c7384e84a" name="ceph-selinux" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="7ffc93ded827e9d45d712b4511e4576dafd5887f329e30cb3b757bde8204a34c" name="ceph-test" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="56cfe66072291615d340c3a87248f877a75b50e65eedf948a34becceb038a48b" name="ceph-test" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="06ecb5f3e8013990101a7165db2023e345783fa6059ed7b3c55eeffae3f6cdbb" name="cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="a6aa2c06bee8d7e6faaef31222f66bcba2795dd4b3b1f9764f19a1856160eafa" name="cephadm" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="a7dae3373f946dc67ce803120348467a7b4133240154ed8d35c4e43caa1795a8" name="cephfs-mirror" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="ff8e0fa6079443a19cbaee873b3be843323799ae9921ce3271668ba826cc44b9" name="cephfs-mirror" arch="aarch64">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="9d05466254d03911fbb9bd6930f00954182fa2e1dd9ff067699923d885a4ab6f" name="cephfs-top" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="21.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-11" date="1670241600">- fix CVE-2022-3650</changelog>
  <changelog author="wanglin &lt;wangl29@chinatelecom.cn&gt; - 2:16.2.7-12" date="1671537600">- use vendor macro in buildrequire package</changelog>
  <changelog author="yaoguangzhong &lt;yaoguangzhong@xfusion.com&gt; - 2:16.2.7-13" date="1672228800">- fix no module named v1_event for mgr/k8sevent</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 2:16.2.7-14" date="1673524800">- add loongarch support for ceph</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-15" date="1676376000">- fix error for uninstall cephadm</changelog>
  <changelog author="wangzengliang&lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-16" date="1676894400">- fix CVE-2022-3854</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
</package>
<package pkgid="e39dff25b5c8820a5b9e9f6a21bd8f132b75c9fc3baad2f983af5bdcbc814454" name="cephfs-top" arch="noarch">
  <version epoch="2" ver="16.2.7" rel="22.oe2203sp4"/>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-17" date="1685620800">- fix error for uninstall cephadm</changelog>
  <changelog author="liuqinfei &lt;lucas.liuqinfei@huawei.com&gt; - 2:16.2.7-19" date="1693224000">- add judgment for ceph-volume lvm activate
- sync from #PR 187</changelog>
  <changelog author="lizhipeng &lt;qiuxinyidian@gmail.com&gt; - 2:16.2.7-20" date="1711108800">- fix CVE-2023-46159</changelog>
  <changelog author="yangxiaoliang &lt;yangxiaoliang@uniontech.com&gt; - 2:16.2.7-21" date="1730462400">- fix osd activate error when node reboot</changelog>
  <changelog author="wangzengliang &lt;wangzengliang2@huawei.com&gt; - 2:16.2.7-22" date="1740139200">- fix-CVE-2024-48916</changelog>
</package>
<package pkgid="82944d880afb1570d1fde1a3af2ccb989def4a8b30af40bf4e2c1c567f4d11a8" name="chkconfig" arch="aarch64">
  <version epoch="0" ver="1.21" rel="2.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.20-2" date="1661601600">- fix coredump while parseServiceInfo return non-zero</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.21-1" date="1665576000">- Update to 1.21</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
</package>
<package pkgid="d5d6083fbd78df5a1d453402156ead13ce363208b3d897673e1926b77a88f956" name="chkconfig-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.21" rel="2.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.20-2" date="1661601600">- fix coredump while parseServiceInfo return non-zero</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.21-1" date="1665576000">- Update to 1.21</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
</package>
<package pkgid="270fd416682b8de7d1d3fbc3524ef01af880bb58d8e3686fb7baa1f2357d7bbe" name="chkconfig-debugsource" arch="aarch64">
  <version epoch="0" ver="1.21" rel="2.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.20-2" date="1661601600">- fix coredump while parseServiceInfo return non-zero</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.21-1" date="1665576000">- Update to 1.21</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
</package>
<package pkgid="d6411f074270a0ec60655afacdfc43e246a56cf65a9e790398cffbd45e3519d7" name="chkconfig-help" arch="noarch">
  <version epoch="0" ver="1.21" rel="2.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 1.20-2" date="1661601600">- fix coredump while parseServiceInfo return non-zero</changelog>
  <changelog author="fushanqing &lt;fushanqing@kylinos.cn&gt; - 1.21-1" date="1665576000">- Update to 1.21</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 1.21-2" date="1723464000">- fix systemdActive()</changelog>
</package>
<package pkgid="85c2bc0b920c6cec60f57bb264d1cce779c8fa1be2098a43695503b7b1ee1cfb" name="chrony" arch="aarch64">
  <version epoch="0" ver="4.1" rel="7.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683547200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.1-7" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="a12f64196f1b6e2533e0868d6964b7d818abadd987ab6d3b0d2b1e6f8245c5a1" name="chrony-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1" rel="7.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683547200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.1-7" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="1dc8718ee3952b126db12c186070c6a35e774ebb1c5217d13a28f6bc35d7ed8a" name="chrony-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1" rel="7.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683547200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.1-7" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="b4f445ea4ab19fd168613146da8c4542a806f486d34e3e06985a4e7980ac7513" name="chrony-help" arch="noarch">
  <version epoch="0" ver="4.1" rel="7.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 4.1-5" date="1683547200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for enable NTS</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.1-6" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add loongarch64 support</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 4.1-7" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="4a6b3eb980de11f9984af5afff4ca2ae7f4ded601a5ede45802c407265208f61" name="chrpath" arch="aarch64">
  <version epoch="0" ver="0.16" rel="14.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.16-14" date="1730721600">- Handle DT_MIPS_RLD_MAP_REL on MIPS (debian bug#820335)</changelog>
</package>
<package pkgid="3bf0414efa442c3394fb5274d40f6c41daaefe0891455b98cc7d238ae4aab8d5" name="chrpath-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.16" rel="14.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.16-14" date="1730721600">- Handle DT_MIPS_RLD_MAP_REL on MIPS (debian bug#820335)</changelog>
</package>
<package pkgid="bd228e542a19b1908e6e41e56871703cc2360f9825d5d7b9ac3c3e3ef34f7f00" name="chrpath-debugsource" arch="aarch64">
  <version epoch="0" ver="0.16" rel="14.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.16-14" date="1730721600">- Handle DT_MIPS_RLD_MAP_REL on MIPS (debian bug#820335)</changelog>
</package>
<package pkgid="b46c35cdbf30fd7f2f79da074478b0a04862cf90d9f35ee2b8241b6e890d68b6" name="chrpath-help" arch="noarch">
  <version epoch="0" ver="0.16" rel="14.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.16-14" date="1730721600">- Handle DT_MIPS_RLD_MAP_REL on MIPS (debian bug#820335)</changelog>
</package>
<package pkgid="fb40de7ef618ef8779fcfca8cac91fd18aec023b8e9c86a5b306a89ad753c104" name="cjson" arch="aarch64">
  <version epoch="0" ver="1.7.15" rel="6.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.7.15-2" date="1703419200">- Fix CVE-2023-50471 CVE-2023-50472</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1.7.15-3" date="1709640000">- fix potential memory leak in merge_patch()</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 1.7.15-4" date="1714132800">- fix CVE-2024-31755</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 1.7.15-5" date="1718712000">- sync patches from 24.03 branches</changelog>
  <changelog author="zhangpan &lt;zhangpan@cqsoftware.com.cn&gt; - 1.7.15-6" date="1754395200">- Fix CVE-2023-26819</changelog>
</package>
<package pkgid="76a648757c87dd6392991e7084ead7f39cdab56d2a7db3a3ec5244b7e36f5a94" name="cjson-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.7.15" rel="6.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.7.15-2" date="1703419200">- Fix CVE-2023-50471 CVE-2023-50472</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1.7.15-3" date="1709640000">- fix potential memory leak in merge_patch()</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 1.7.15-4" date="1714132800">- fix CVE-2024-31755</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 1.7.15-5" date="1718712000">- sync patches from 24.03 branches</changelog>
  <changelog author="zhangpan &lt;zhangpan@cqsoftware.com.cn&gt; - 1.7.15-6" date="1754395200">- Fix CVE-2023-26819</changelog>
</package>
<package pkgid="d956c92117b8d7d3b7b277512a0ae6c7d2604c73d9b897f7fea39fab47690d36" name="cjson-debugsource" arch="aarch64">
  <version epoch="0" ver="1.7.15" rel="6.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.7.15-2" date="1703419200">- Fix CVE-2023-50471 CVE-2023-50472</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1.7.15-3" date="1709640000">- fix potential memory leak in merge_patch()</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 1.7.15-4" date="1714132800">- fix CVE-2024-31755</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 1.7.15-5" date="1718712000">- sync patches from 24.03 branches</changelog>
  <changelog author="zhangpan &lt;zhangpan@cqsoftware.com.cn&gt; - 1.7.15-6" date="1754395200">- Fix CVE-2023-26819</changelog>
</package>
<package pkgid="00b6971f0f7cf4ec7bbf1dbc10945ed24b5708bd56e8e10ecd984a176b1d15e8" name="cjson-devel" arch="aarch64">
  <version epoch="0" ver="1.7.15" rel="6.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1.7.15-2" date="1703419200">- Fix CVE-2023-50471 CVE-2023-50472</changelog>
  <changelog author="xiejing &lt;xiejing@kylinos.cn&gt; - 1.7.15-3" date="1709640000">- fix potential memory leak in merge_patch()</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 1.7.15-4" date="1714132800">- fix CVE-2024-31755</changelog>
  <changelog author="Zhao Mengmeng &lt;zhaomengmeng@kylinos.cn&gt; - 1.7.15-5" date="1718712000">- sync patches from 24.03 branches</changelog>
  <changelog author="zhangpan &lt;zhangpan@cqsoftware.com.cn&gt; - 1.7.15-6" date="1754395200">- Fix CVE-2023-26819</changelog>
</package>
<package pkgid="ab0d01c71eb873f5527a7bc8265cf894a4b6ffee42c4b2ae3e9c43b83dcc2fa2" name="clamav" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="875d05713c2e5f5c93d7a4ec88855a997a54afc49e294172385aa13232a36bad" name="clamav" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="54d39d4b908136a2636db78a7e67515d9c83f219221d9cec942be6f53acbc44b" name="clamav-data" arch="noarch">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="4906f6029db461b9c70db173cd4d5c9202347ef8b3d6388dd86694e3f7361586" name="clamav-data" arch="noarch">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="4af689b3b1f82d93b259ef8cbc13ff393f88d99458e916012e866612d25374db" name="clamav-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="88ba7cf6d581b266449499d04cb32115ba6c43093d7b1e14d84473747c56486e" name="clamav-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="e1de736311769940a8b3b048fb59eacca9ba77616c8a842b4f4affd04d4a6ca4" name="clamav-debugsource" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="8fa828fe3d1bd24dbed01541f595ef246181ea9a8f0d29717f8d544ee3937668" name="clamav-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="ef7b178aac6bf2afa97b5c3bc3b435326de472070b4051e60bfbb35c5089150b" name="clamav-devel" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="4b7d67e213d466ee6ccbb2b599f8c43ce2eaf3d8525c2c1f3882deb41a04c80a" name="clamav-devel" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="14088c2165388349787944a099b7ae43c170680a5a99b1773e2769b86bafcda8" name="clamav-filesystem" arch="noarch">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="3df227ad584cca0726224970f7ef0c995f003911bb2612324d08a26c21cd8aa9" name="clamav-filesystem" arch="noarch">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="3f9b1bd134036f055866af8ef0d208ab201eab2a76997dd045d87583bb61a82c" name="clamav-help" arch="noarch">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="824948bc8d38be220436f5c2867a4433cf5bd10e70f16bde23e95f93c8eb377c" name="clamav-help" arch="noarch">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="132f8b1209ffd75af322156da108dfa4a3278ceb10a6f582e68d08315af57eba" name="clamav-milter" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="da9095669ad2db6b8b55188123bcb7ae1af040abffbdfb2a63644a76946acae3" name="clamav-milter" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="e53240bd99f5824ea479ef05483c173dbbe53e394dea7fbf3380a1a249bb46de" name="clamav-update" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="f5e518797ccfeeb08c7bf93c542a88aeafd075b25a5c345966028d6967a6e718" name="clamav-update" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="46d3240527060da0920bd4e28c90127d5cee2da001386dc1ed199944b7dc5aff" name="clamd" arch="aarch64">
  <version epoch="0" ver="0.103.12" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 0.103.8-1" date="1678881600">- Update to 0.103.8 to fix CVE-2023-20032 and CVE-2023-20052</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
</package>
<package pkgid="c1dcb1d27d83939ff1cfacab8ece1e9a6625fb2f9929d50dff9e8d906f17d862" name="clamd" arch="aarch64">
  <version epoch="0" ver="1.0.9" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 0.103.9-1" date="1692705600">- Update to 0.103.9 to fix CVE-2023-20197</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.103.11-1" date="1710936000">- Upgrade to 0.103.11</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.103.12-1" date="1725624000">- Upgrade to 0.103.12</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-1" date="1750766400">- Update to 1.0.9 for fix CVE-2025-20260</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.0.9-2" date="1750939200">- Fix clamav downgrade failure</changelog>
</package>
<package pkgid="94d5ce5e20622b4888a14dd655781da5c9bebb3b84ae6af1cad85e2a83053468" name="clippy" arch="aarch64">
  <version epoch="0" ver="1.76.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.64.0-1" date="1683806400">- Update to 1.64.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.64.0-2" date="1690718400">- Use local mirror for speed up</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.64.0-3" date="1708171200">- Fix CVE-2024-24575,CVE-2024-24577</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.76.0-1" date="1740398400">- Update to 1.76.0 because firefox update 128ESR version
- Fix CVE-2022-21658 CVE-2022-46176 CVE-2023-38497
- Obsoletes rust-analysis</changelog>
</package>
<package pkgid="51397bee1b93c58569239e9e44a37292966c0cbc98476be6ebeb04185cad9ae4" name="cloud-init" arch="noarch">
  <version epoch="0" ver="21.4" rel="36.oe2203sp4"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-27" date="1715169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:ec2: Do not enable dhcp6 on EC2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-28" date="1718107200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable use-dns for secondary nics
       Make duplicate route add succeed
       Fix predictable interface rename issue</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-29" date="1725537600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix(net): klibc ipconfig PROTO compatibility
       fix(openstack): Fix bond mac_address</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-30" date="1730721600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ensure random passwords contain multiple character types</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-31" date="1731585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix: properly handle blank lines in fstab</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-32" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:chore: set recursive=False for ensure_dir if parent path is "/"
       test(openstack): Test bond mac address
       fix: Ensure properties for bonded interfaces are properly translated</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 21.4-33" date="1741176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 21.4-34" date="1742299200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 21.4-35" date="1751889600">- Type:cve
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6174</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-36" date="1751889601">- Type:CVE
- CVE:CVE-2024-11584
- SUG:NA
- DESC:fix CVE-2024-11584</changelog>
</package>
<package pkgid="530cdb413b1508d90c09bc95d940fb5cd2fbea778401aebb93e1f73145e3714a" name="cloud-init-help" arch="noarch">
  <version epoch="0" ver="21.4" rel="36.oe2203sp4"/>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-27" date="1715169600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:ec2: Do not enable dhcp6 on EC2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-28" date="1718107200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:disable use-dns for secondary nics
       Make duplicate route add succeed
       Fix predictable interface rename issue</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 21.4-29" date="1725537600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix(net): klibc ipconfig PROTO compatibility
       fix(openstack): Fix bond mac_address</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-30" date="1730721600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ensure random passwords contain multiple character types</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-31" date="1731585600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix: properly handle blank lines in fstab</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-32" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:chore: set recursive=False for ensure_dir if parent path is "/"
       test(openstack): Test bond mac address
       fix: Ensure properties for bonded interfaces are properly translated</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 21.4-33" date="1741176000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches
       skip some test if there are multiple NICs with the MAC address 'ee:ee:ee:ee:ee:ee'</changelog>
  <changelog author="Linux_zhang &lt;zhangruifang@h-partners.com&gt; - 21.4-34" date="1742299200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 21.4-35" date="1751889600">- Type:cve
- CVE:NA
- SUG:NA
- DESC:fix CVE-2024-6174</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 21.4-36" date="1751889601">- Type:CVE
- CVE:CVE-2024-11584
- SUG:NA
- DESC:fix CVE-2024-11584</changelog>
</package>
<package pkgid="0f73e1f8de9ff6c50da40cd3e409ffa38915e68c4fa1887e2d28d43a30a382a8" name="cockpit" arch="aarch64">
  <version epoch="0" ver="178" rel="17.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="255818c3cbb16f026ce99effe0ec4fa3d6a72daf16c991cbd887f00b2f8d990a" name="cockpit-389-ds" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="7.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
</package>
<package pkgid="ccb7ec62cd6500b56b9a40d00a94c13d64ceb2f95f52e72d10a0b283c4c9c3a6" name="cockpit-389-ds" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="8.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
</package>
<package pkgid="0f804da7f9e66c81de686047c621d96a74e0cde6f74925249073699d07d179aa" name="cockpit-389-ds" arch="noarch">
  <version epoch="0" ver="1.4.3.36" rel="9.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.4.3.20-2" date="1691409600">- add support for sw_64 and loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-1" date="1698148800">- Update to 1.4.3.36
- Fix dsidm user/posixgroup get_dn fails with search_ext()
- Fix unable to add objectclass/attribute without x-origin
- Fix execute dsconf to open pdb</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-2" date="1698408000">- Fix dn2rdn -v error</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-3" date="1698926400">- Fix dirsrv-snmp.service start fail</changelog>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.4.3.36-4" date="1707048000">- Add requires 389-ds-base-legacy-tools</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-5" date="1707134400">- Fix CVE-2024-1062</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-6" date="1717588800">- Fix CVE-2024-2199 and CVE-2024-3657</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-7" date="1726142400">- Fix CVE-2022-1949,CVE-2024-5953</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.4.3.36-8" date="1732708800">- Fix dsidm role subtree-status fails with TypeError
- Fix name cockpit_present is not defined.
- Fix typo
- Fix DirSrv has no attribute userid</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.4.3.36-9" date="1739448000">- Fix CVE-2024-8445</changelog>
</package>
<package pkgid="0d23c523cf4fe8cec58c8691abf8c4be0608613ba1bb8bf9ef39add60e60fb04" name="cockpit-cockpit-machines" arch="noarch">
  <version epoch="0" ver="178" rel="17.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="51444bbdfdb5f7c5d6f9faef07cf21e0bd4011c67b819397356a2a73d3e3558f" name="cockpit-cockpit-machines-ovirt" arch="noarch">
  <version epoch="0" ver="178" rel="17.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="cf68aa1ac9fd4c1459f30913323b90c0a273ae7085f4ba602bdb3b7697ecaa86" name="cockpit-debuginfo" arch="aarch64">
  <version epoch="0" ver="178" rel="17.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="c70d97c8bd2d82fefba336a236c5a780ccc717f872cdd56946e0b9b07ad4d00c" name="cockpit-debugsource" arch="aarch64">
  <version epoch="0" ver="178" rel="17.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="51dff12a9ef0fdf70a94d340f3453f112c366980bc86fefa91a07338792ffa92" name="cockpit-devel" arch="aarch64">
  <version epoch="0" ver="178" rel="17.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="efb1e682942e6cd9a718cb0a5d6b210350d6766d675a72ad2ae8c7399a642d76" name="cockpit-help" arch="noarch">
  <version epoch="0" ver="178" rel="17.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 178-12" date="1670932800">- strip binary file</changelog>
  <changelog author="zhangpan &lt;zhangpan@h-partners.com&gt; - 178-13" date="1673352000">- Type:NA
- Id:NA
- SUG:NA
- DESC:splits subpackages cockpit-machines cockpit-machines-ovirt</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-14" date="1714305600">- Type:CVE
- ID:CVE-2020-35850
- SUG:restart
- DESC:fix CVE-2020-35850</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-15" date="1716379200">- Type:NA
- ID:NA
- SUG:NA
- DESC:add more zh_CN translation for i18n</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-16" date="1720094400">- Type:CVE
- ID:CVE-2024-6126
- SUG:restart
- DESC:fix CVE-2024-6126</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 178-17" date="1720094401">- fix CVE-2024-6126 patch name</changelog>
</package>
<package pkgid="6a947bafea89cd2115fa5f3a4e72b66dcc40964cb2fe4776a9d934533fb8d721" name="cogl" arch="aarch64">
  <version epoch="0" ver="1.22.8" rel="3.oe2203sp4"/>
  <changelog author="Max.LEE &lt;liweigang.lwg@gmail.com&gt; - 1.22.8-3" date="1733400000">- include all patches in the source</changelog>
</package>
<package pkgid="0c44d7b97847f6c5fdbedd7dadc4f4cb050a82b2abb41b310408313f6fb115ec" name="cogl-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.22.8" rel="3.oe2203sp4"/>
  <changelog author="Max.LEE &lt;liweigang.lwg@gmail.com&gt; - 1.22.8-3" date="1733400000">- include all patches in the source</changelog>
</package>
<package pkgid="4cbf8fe0b9a1e99a235142758d1bd36275eef3c929ce4712ee5f899525e5d2af" name="cogl-debugsource" arch="aarch64">
  <version epoch="0" ver="1.22.8" rel="3.oe2203sp4"/>
  <changelog author="Max.LEE &lt;liweigang.lwg@gmail.com&gt; - 1.22.8-3" date="1733400000">- include all patches in the source</changelog>
</package>
<package pkgid="152cc89c839f15325e3609e384380752557a67887019ab0d0d116f218977c8e2" name="cogl-devel" arch="aarch64">
  <version epoch="0" ver="1.22.8" rel="3.oe2203sp4"/>
  <changelog author="Max.LEE &lt;liweigang.lwg@gmail.com&gt; - 1.22.8-3" date="1733400000">- include all patches in the source</changelog>
</package>
<package pkgid="e86d1f3969cd8d72859fc0af71c19390535692a5c9b18fda62aaaefe54338316" name="cogl-help" arch="noarch">
  <version epoch="0" ver="1.22.8" rel="3.oe2203sp4"/>
  <changelog author="Max.LEE &lt;liweigang.lwg@gmail.com&gt; - 1.22.8-3" date="1733400000">- include all patches in the source</changelog>
</package>
<package pkgid="e5408c40a4bce8ffea6230123914495dc28654709070e8c17a83cf9a810d0c32" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="321.oe2203sp4"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 1.2.0-312" date="1691668800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add sw_64 support</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-313" date="1695124800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-314" date="1699444800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:bump ttrpc to fix containerd-shim socket connect increase leak after restart docker</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-315" date="1703160000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-316" date="1706616000">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2023-39325</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-317" date="1707220800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update vendored golang.org/x/net</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 1.2.0-318" date="1708689600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:disable Transparent HugePage for shim process if SHIM_DISABLE_THP is set</changelog>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 1.2.0-319" date="1709553600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:FIFOSet.Close() check if FIFOSet is nill to prevent NPE</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 1.2.0-320" date="1718712000">- Type:enhancement
- ID:NA
- SUG:NA
- DESC:add loongarch64 sw_64 riscv64 to THP patch</changelog>
  <changelog author="dongyuzhen &lt;dongyuzhen@h-partners.com&gt; - 1.2.0-321" date="1742299200">- Type:CVE
- ID:NA
- SUG:NA
- DESC:fix CVE-2024-40635</changelog>
</package>
<package pkgid="55e724686a0f9c66041dcd451c3969a5286ff7e9380df18143ce4d5fe0560241" name="coreutils" arch="aarch64">
  <version epoch="0" ver="9.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 9.0-11" date="1696766400">- sync patches from community
- add backport-who-fix-only-theoretical-overflow.patch
      backport-tac-handle-short-reads-on-input.patch
      backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
      backport-who-don-t-crash-if-clock-gyrates.patch
      backport-doc-od-strings-clarify-operation.patch
      backport-wc-port-to-kernels-that-disable-XSAVE-YMM.patch</changelog>
  <changelog author="jiangchuangang &lt;jiangchuangang@huawei.com&gt; - 9.0-12" date="1700913600">- skip testcase for overlay filesystem because of no inotify_add_watch
  add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch</changelog>
  <changelog author="jiangchuangang &lt;jiangchuangang@huawei.com&gt; - 9.0-13" date="1701172800">- fix typo in zh_CN.po</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 9.0-14" date="1718193600">- sort: don't trust st_size on /proc files</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.0-15" date="1719316800">- remove arch judgement at patch that support sw</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-16" date="1726056000">- sync patches from community
- add backport-pinky-fix-string-size-calculation.patch
      backport-cksum-consistently-validate-length-attributes.patch
      backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
      backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
      backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
      backport-coreutils-df-direct.patch
      backport-df-fix-memory-leak.patch
      backport-ls-avoid-triggering-automounts.patch
      backport-pr-don-t-use-uninitialized-var.patch
      backport-stat-only-automount-with-cached-never.patch
      backport-touch-fix-aliasing-bug.patch
      backport-putenv-Don-t-crash-upon-out-of-memory.patch
      backport-head-off_t-not-uintmax_t-for-file-offset.patch
      backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
      backport-shuf-fix-randomness-bug.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-17" date="1732795200">- sync patches from community
- add backport-head-fix-overflows-in-elide_tail_bytes_pipe.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-18" date="1741003200">- sync patches from community
- add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
      backport-sort-fix-debug-buffer-overrun.patch
      backport-tac-avoid-out-of-bounds-access.patch
      backport-yes-avoid-failure-on-CHERI-protected-systems.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 9.0-19" date="1748260800">- backport: tail: avoid infloop with -c on /dev/zero</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.0-20" date="1748692800">- fix CVE-2025-5278</changelog>
</package>
<package pkgid="3feda828fb67ac8f2e6af30b7d4c968e4c9f8cbfb7fd582ad3a24e857be1e57c" name="coreutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 9.0-11" date="1696766400">- sync patches from community
- add backport-who-fix-only-theoretical-overflow.patch
      backport-tac-handle-short-reads-on-input.patch
      backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
      backport-who-don-t-crash-if-clock-gyrates.patch
      backport-doc-od-strings-clarify-operation.patch
      backport-wc-port-to-kernels-that-disable-XSAVE-YMM.patch</changelog>
  <changelog author="jiangchuangang &lt;jiangchuangang@huawei.com&gt; - 9.0-12" date="1700913600">- skip testcase for overlay filesystem because of no inotify_add_watch
  add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch</changelog>
  <changelog author="jiangchuangang &lt;jiangchuangang@huawei.com&gt; - 9.0-13" date="1701172800">- fix typo in zh_CN.po</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 9.0-14" date="1718193600">- sort: don't trust st_size on /proc files</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.0-15" date="1719316800">- remove arch judgement at patch that support sw</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-16" date="1726056000">- sync patches from community
- add backport-pinky-fix-string-size-calculation.patch
      backport-cksum-consistently-validate-length-attributes.patch
      backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
      backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
      backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
      backport-coreutils-df-direct.patch
      backport-df-fix-memory-leak.patch
      backport-ls-avoid-triggering-automounts.patch
      backport-pr-don-t-use-uninitialized-var.patch
      backport-stat-only-automount-with-cached-never.patch
      backport-touch-fix-aliasing-bug.patch
      backport-putenv-Don-t-crash-upon-out-of-memory.patch
      backport-head-off_t-not-uintmax_t-for-file-offset.patch
      backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
      backport-shuf-fix-randomness-bug.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-17" date="1732795200">- sync patches from community
- add backport-head-fix-overflows-in-elide_tail_bytes_pipe.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-18" date="1741003200">- sync patches from community
- add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
      backport-sort-fix-debug-buffer-overrun.patch
      backport-tac-avoid-out-of-bounds-access.patch
      backport-yes-avoid-failure-on-CHERI-protected-systems.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 9.0-19" date="1748260800">- backport: tail: avoid infloop with -c on /dev/zero</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.0-20" date="1748692800">- fix CVE-2025-5278</changelog>
</package>
<package pkgid="2c4465e9d9666b3a36163f04355abd9d34e9047c56954dd48dc9842ff11b9968" name="coreutils-debugsource" arch="aarch64">
  <version epoch="0" ver="9.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 9.0-11" date="1696766400">- sync patches from community
- add backport-who-fix-only-theoretical-overflow.patch
      backport-tac-handle-short-reads-on-input.patch
      backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
      backport-who-don-t-crash-if-clock-gyrates.patch
      backport-doc-od-strings-clarify-operation.patch
      backport-wc-port-to-kernels-that-disable-XSAVE-YMM.patch</changelog>
  <changelog author="jiangchuangang &lt;jiangchuangang@huawei.com&gt; - 9.0-12" date="1700913600">- skip testcase for overlay filesystem because of no inotify_add_watch
  add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch</changelog>
  <changelog author="jiangchuangang &lt;jiangchuangang@huawei.com&gt; - 9.0-13" date="1701172800">- fix typo in zh_CN.po</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 9.0-14" date="1718193600">- sort: don't trust st_size on /proc files</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.0-15" date="1719316800">- remove arch judgement at patch that support sw</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-16" date="1726056000">- sync patches from community
- add backport-pinky-fix-string-size-calculation.patch
      backport-cksum-consistently-validate-length-attributes.patch
      backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
      backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
      backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
      backport-coreutils-df-direct.patch
      backport-df-fix-memory-leak.patch
      backport-ls-avoid-triggering-automounts.patch
      backport-pr-don-t-use-uninitialized-var.patch
      backport-stat-only-automount-with-cached-never.patch
      backport-touch-fix-aliasing-bug.patch
      backport-putenv-Don-t-crash-upon-out-of-memory.patch
      backport-head-off_t-not-uintmax_t-for-file-offset.patch
      backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
      backport-shuf-fix-randomness-bug.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-17" date="1732795200">- sync patches from community
- add backport-head-fix-overflows-in-elide_tail_bytes_pipe.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-18" date="1741003200">- sync patches from community
- add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
      backport-sort-fix-debug-buffer-overrun.patch
      backport-tac-avoid-out-of-bounds-access.patch
      backport-yes-avoid-failure-on-CHERI-protected-systems.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 9.0-19" date="1748260800">- backport: tail: avoid infloop with -c on /dev/zero</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.0-20" date="1748692800">- fix CVE-2025-5278</changelog>
</package>
<package pkgid="5db0298f74d59228ef6c1c58184cbe96419ff315fe2a113ad566763a350a578e" name="coreutils-help" arch="noarch">
  <version epoch="0" ver="9.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 9.0-11" date="1696766400">- sync patches from community
- add backport-who-fix-only-theoretical-overflow.patch
      backport-tac-handle-short-reads-on-input.patch
      backport-setenv-Don-t-crash-if-malloc-returns-NULL.patch
      backport-who-don-t-crash-if-clock-gyrates.patch
      backport-doc-od-strings-clarify-operation.patch
      backport-wc-port-to-kernels-that-disable-XSAVE-YMM.patch</changelog>
  <changelog author="jiangchuangang &lt;jiangchuangang@huawei.com&gt; - 9.0-12" date="1700913600">- skip testcase for overlay filesystem because of no inotify_add_watch
  add test-skip-overlay-filesystem-because-of-no-inotify_add_watch.patch</changelog>
  <changelog author="jiangchuangang &lt;jiangchuangang@huawei.com&gt; - 9.0-13" date="1701172800">- fix typo in zh_CN.po</changelog>
  <changelog author="yanglongkang &lt;yanglongkang@h-partners.com&gt; - 9.0-14" date="1718193600">- sort: don't trust st_size on /proc files</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.0-15" date="1719316800">- remove arch judgement at patch that support sw</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-16" date="1726056000">- sync patches from community
- add backport-pinky-fix-string-size-calculation.patch
      backport-cksum-consistently-validate-length-attributes.patch
      backport-timeout-fix-race-where-we-might-kill-arbitrary-proce.patch
      backport-timeout-fix-narrow-race-in-failing-to-kill-processes.patch
      backport-maint-basenc-consistently-check-buffer-bounds-when-e.patch
      backport-coreutils-df-direct.patch
      backport-df-fix-memory-leak.patch
      backport-ls-avoid-triggering-automounts.patch
      backport-pr-don-t-use-uninitialized-var.patch
      backport-stat-only-automount-with-cached-never.patch
      backport-touch-fix-aliasing-bug.patch
      backport-putenv-Don-t-crash-upon-out-of-memory.patch
      backport-head-off_t-not-uintmax_t-for-file-offset.patch
      backport-shuf-avoid-integer-overflow-on-huge-inputs.patch
      backport-shuf-fix-randomness-bug.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-17" date="1732795200">- sync patches from community
- add backport-head-fix-overflows-in-elide_tail_bytes_pipe.patch</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 9.0-18" date="1741003200">- sync patches from community
- add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
      backport-sort-fix-debug-buffer-overrun.patch
      backport-tac-avoid-out-of-bounds-access.patch
      backport-yes-avoid-failure-on-CHERI-protected-systems.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 9.0-19" date="1748260800">- backport: tail: avoid infloop with -c on /dev/zero</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.0-20" date="1748692800">- fix CVE-2025-5278</changelog>
</package>
<package pkgid="82781206232efc6b9596bfc23b30271af3b9e02f08f043b2b78b5fb619379a1e" name="corosync" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.1.5-2" date="1743076800">- fix CVE-2025-30472</changelog>
</package>
<package pkgid="b89d93488b15307f8b248d3c5e65e86e687a9a10e6d42fe683f6199485f7f487" name="corosync-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.1.5-2" date="1743076800">- fix CVE-2025-30472</changelog>
</package>
<package pkgid="1dd58abe0df1adc7529b19d23e392750080f4d23aca6f45640f112f9008243ec" name="corosync-debugsource" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.1.5-2" date="1743076800">- fix CVE-2025-30472</changelog>
</package>
<package pkgid="cc789519c9031e8e84af4c7b1bfe2bca4137792e1bf59edd3b2e989f80a7422a" name="corosync-vqsim" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.1.5-2" date="1743076800">- fix CVE-2025-30472</changelog>
</package>
<package pkgid="6267043a4458051b8a1c6ae9ae297b1c5ea4742d8e79360025734772a5ede182" name="corosynclib" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.1.5-2" date="1743076800">- fix CVE-2025-30472</changelog>
</package>
<package pkgid="792d2651999960f70355451c233cf90f963ab58d9246f3a4619962910f5d2da8" name="corosynclib-devel" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.1.5-2" date="1743076800">- fix CVE-2025-30472</changelog>
</package>
<package pkgid="3458e4e4eb45c1873e0b710c1c07282a1d43d798d41e3965217998c467e09d1a" name="cpp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="430315d5aac63a2e850a73e4c9ec7f7249d373891adf224e208b40502d10e0ea" name="cpp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="80c2822069a8dbb3ccb3c3ab3eb9f36b9153f5175b99af7d0ad7119fa0829c55" name="cpp" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="430b298a56fa663325fd8996bb4865f307784cb698276dd93a48676227d04621" name="cpp-httplib" arch="aarch64">
  <version epoch="0" ver="0.12.4" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.12.4-1" date="1686657600">- Update to 0.12.4 for fix CVE-2023-26130</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
</package>
<package pkgid="628ca28a537ecdf56ae5fa8531f94b8e6262034397f3373c9b26168fdf80b7aa" name="cpp-httplib" arch="aarch64">
  <version epoch="0" ver="0.12.4" rel="4.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 0.12.4-1" date="1686657600">- Update to 0.12.4 for fix CVE-2023-26130</changelog>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
</package>
<package pkgid="a927acb404436c1cb7c8a8d1435a3c50344c2232a0380c1df8489d06f9687844" name="cpp-httplib" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="1.oe2203sp4"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
</package>
<package pkgid="56d7408d8a3648df2d9d4d5f6e0206076c87285259fed998d6174407f9f889b9" name="cpp-httplib" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="2.oe2203sp4"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-2" date="1752580800">- Fix CVE-2025-53629</changelog>
</package>
<package pkgid="789f0a1b4dd3f61470345c161bda01e528907d1823dff7ebe74255cfc0e15f29" name="cpp-httplib-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="1.oe2203sp4"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
</package>
<package pkgid="38594202d02424f3f25d715b1bf4bced53d9e7a0ab41407df6ba9a22732505a0" name="cpp-httplib-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="2.oe2203sp4"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-2" date="1752580800">- Fix CVE-2025-53629</changelog>
</package>
<package pkgid="2752c9b7c500ffab8a5ff64b57df8054c4e844178289e69bc02f947de4f6d01e" name="cpp-httplib-debugsource" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="1.oe2203sp4"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
</package>
<package pkgid="5a99c8f3f7e8b8fc4eebf29d97b52198d01d65b0d93223e15d96b578a736308c" name="cpp-httplib-debugsource" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="2.oe2203sp4"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-2" date="1752580800">- Fix CVE-2025-53629</changelog>
</package>
<package pkgid="dc6836a682265fc48085d86c2c59dde926dc1249911e4c46fdedd10ebe8a5d6f" name="cpp-httplib-devel" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="1.oe2203sp4"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
</package>
<package pkgid="25ad301d5ae4252b59d6c1206f0b74dc8a3901c52b7b30e7e4d3618e4db2a1f5" name="cpp-httplib-devel" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="2.oe2203sp4"/>
  <changelog author="Chenxi Mao &lt;chenxi.mao@suse.com&gt; - 0.12.4-2" date="1695816000">- Add openssl to build require list to fix build error</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-3" date="1738929600">- Fix CVE-2025-0825</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.12.4-4" date="1746619200">- Fix CVE-2025-46728</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-1" date="1751371200">- Update to 0.22.0 for fix CVE-2025-52887</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 0.22.0-2" date="1752580800">- Fix CVE-2025-53629</changelog>
</package>
<package pkgid="76b9e17683b7c4cb45c8970b2296c50562b709bd1d66eba79565c63ac140d14d" name="cpu_sentry" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="11.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-2" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete rpath setting</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-3" date="1721908800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix the problem that function cpu_report_result() is called more than once
       fix error handling</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-4" date="1721995200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix result when process output is None</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-5" date="1724846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cpu_utility and cpu_patrol must be an integer</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-6" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:setting parameters must be integer</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-7" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add deleted code to plugin rasdaemon</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-8" date="1725105601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add ipmitool to Recommends for cpu_sentry</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-9" date="1725278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Remove ANSI escape sequences</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 1.0.2-10" date="1725883200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split cpu_sentry and syssentry</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-11" date="1726056000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix configparser.InterpolationSyntaxError</changelog>
</package>
<package pkgid="3814cf6e5b8bc62d6adc321de0f1c20876fc381eaabf27e2db39c91808e1b949" name="cpu_sentry" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="15.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-6" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:setting parameters must be integer</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-7" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add deleted code to plugin rasdaemon</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-8" date="1725105601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add ipmitool to Recommends for cpu_sentry</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-9" date="1725278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Remove ANSI escape sequences</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 1.0.2-10" date="1725883200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:split cpu_sentry and syssentry</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-11" date="1726056000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix configparser.InterpolationSyntaxError</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-12" date="1726315200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix syssentry fails to be started when cpu_sentry is not installed</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-13" date="1726920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:optimize the handing of cat-cli error msg in cpu_sentry
       over threshold should be warn level log in cat-cli</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-14" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add separator to err info</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-15" date="1727265601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove threshold:max cpu cores</changelog>
</package>
<package pkgid="12e4770f78f1c7c6f4831c54ae5104046461023bdd06ca4290c8e86044ea8d05" name="cpu_sentry" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="22.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-13" date="1726920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:optimize the handing of cat-cli error msg in cpu_sentry
       over threshold should be warn level log in cat-cli</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-14" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add separator to err info</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-15" date="1727265601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove threshold:max cpu cores</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-16" date="1729512000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add hbm_online_repair</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-17" date="1730116800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix hbm_online_repair notice BMC function and create efi fd</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-18" date="1730462400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix uint8 bug and change page isolation threshold default value</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-19" date="1730721600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix write file return code bug</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-20" date="1730808000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: update the commit of the log level and format function of sysSentry</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-21" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: add boundary check for settings</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 1.0.2-22" date="1730980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix xalarm not reject alarm msg exceeds max length</changelog>
</package>
<package pkgid="74ed0f30039d69bafec4ff76f4f4069a30b6527bb891db79f491e9a2829965a7" name="cpu_sentry" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="4.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-1" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Package init</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-2" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete rpath setting</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-3" date="1721908800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix the problem that function cpu_report_result() is called more than once
       fix error handling</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-4" date="1721995200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix result when process output is None</changelog>
</package>
<package pkgid="87ebcaf04533fce256c3414d84731e2de5e10b2e57c686e41dac1aae7712d960" name="cpu_sentry" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="9.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-1" date="1718107200">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC:Package init</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-2" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:delete rpath setting</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-3" date="1721908800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix the problem that function cpu_report_result() is called more than once
       fix error handling</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-4" date="1721995200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix result when process output is None</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-5" date="1724846400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cpu_utility and cpu_patrol must be an integer</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-6" date="1725019200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:setting parameters must be integer</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 1.0.2-7" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add deleted code to plugin rasdaemon</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-8" date="1725105601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add ipmitool to Recommends for cpu_sentry</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-9" date="1725278400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Remove ANSI escape sequences</changelog>
</package>
<package pkgid="a81f8a347a3fc0fb20fba0a2b623dbd403794a98347c32be0d2da932319481b0" name="crash" arch="aarch64">
  <version epoch="0" ver="8.0.2" rel="4.oe2203sp4"/>
  <changelog author="lijianglin&lt;lijianglin2@huawei.com&gt; - 7.3.0-10" date="1672833600">- fix segfault by "bt" command with offline cpus</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-11" date="1689595200">- arm64: Use VA_BITS for page_offset calculation</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-2" date="1690286401">- arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  when corrupt stack pointer address is given</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-3" date="1732881600">- arm64: fix SDEI stack frame unwind while UNW_4_14 is set</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-4" date="1734436800">- include all patches in the source package</changelog>
</package>
<package pkgid="8af6e8e1e223f66a875eebc8d7b6be37c95629560bbaea892eca3cfa236cfd5c" name="crash-debuginfo" arch="aarch64">
  <version epoch="0" ver="8.0.2" rel="4.oe2203sp4"/>
  <changelog author="lijianglin&lt;lijianglin2@huawei.com&gt; - 7.3.0-10" date="1672833600">- fix segfault by "bt" command with offline cpus</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-11" date="1689595200">- arm64: Use VA_BITS for page_offset calculation</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-2" date="1690286401">- arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  when corrupt stack pointer address is given</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-3" date="1732881600">- arm64: fix SDEI stack frame unwind while UNW_4_14 is set</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-4" date="1734436800">- include all patches in the source package</changelog>
</package>
<package pkgid="0b1ec159ae88d24f2596bb1f2614ce763bd77114fa99932a25f71a0ff77dfac2" name="crash-debugsource" arch="aarch64">
  <version epoch="0" ver="8.0.2" rel="4.oe2203sp4"/>
  <changelog author="lijianglin&lt;lijianglin2@huawei.com&gt; - 7.3.0-10" date="1672833600">- fix segfault by "bt" command with offline cpus</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-11" date="1689595200">- arm64: Use VA_BITS for page_offset calculation</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-2" date="1690286401">- arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  when corrupt stack pointer address is given</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-3" date="1732881600">- arm64: fix SDEI stack frame unwind while UNW_4_14 is set</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-4" date="1734436800">- include all patches in the source package</changelog>
</package>
<package pkgid="8e3960079dd0acfc8aead6459b96e8d8336ed93cf9e06f2a6140f1434fee33b5" name="crash-devel" arch="aarch64">
  <version epoch="0" ver="8.0.2" rel="4.oe2203sp4"/>
  <changelog author="lijianglin&lt;lijianglin2@huawei.com&gt; - 7.3.0-10" date="1672833600">- fix segfault by "bt" command with offline cpus</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-11" date="1689595200">- arm64: Use VA_BITS for page_offset calculation</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-2" date="1690286401">- arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  when corrupt stack pointer address is given</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-3" date="1732881600">- arm64: fix SDEI stack frame unwind while UNW_4_14 is set</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-4" date="1734436800">- include all patches in the source package</changelog>
</package>
<package pkgid="738921852c60c3b220e6dd3a40d0c71fad95a2a8e37aa2b1e1c397205671ee90" name="crash-help" arch="noarch">
  <version epoch="0" ver="8.0.2" rel="4.oe2203sp4"/>
  <changelog author="lijianglin&lt;lijianglin2@huawei.com&gt; - 7.3.0-10" date="1672833600">- fix segfault by "bt" command with offline cpus</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 7.3.0-11" date="1689595200">- arm64: Use VA_BITS for page_offset calculation</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-1" date="1690286400">- Update from master</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 8.0.2-2" date="1690286401">- arm64: Fix again segfault in arm64_is_kernel_exception_frame()
  when corrupt stack pointer address is given</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-3" date="1732881600">- arm64: fix SDEI stack frame unwind while UNW_4_14 is set</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 8.0.2-4" date="1734436800">- include all patches in the source package</changelog>
</package>
<package pkgid="d148817ff2e8f823726f17e844d0fa9ba4aec0dd67e7e7d001cf842218494bdc" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="568635760f643f6e9d01214731d0eafc075bacfc1a9822ddc2456240c86e1953" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="7b5c546261d84782a932295b9d1b3c79f5d946d9538139bf6ab831121f240177" name="cups" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="f5a12158a6be45441005395d8b5d0f32a21f9a8ccf0ac876a27e2f809243c105" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="2b55995ff9c2405936e2c6d886268999aaa79e21c4fda35eb21ffe540cb08a55" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="515642968c4e1e83d5f53bb7f75ff532b60c139cfde0ba43d7eb51c65281eb0f" name="cups-client" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="bbc72ad481e8d81733606459deaee7a5df2b4cf85e9277553856157fd91c3406" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="4d0476ba6b7ecd282fbc198a96d197bc488190ac8382c4e731c7f325d2bbf904" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="d208143d84604297a52c99106704234cb3de54ba119b9d741d836d9aec9a5318" name="cups-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="4ab836d1a8017298e478715aceb0c5b70e2d794b0b53f8f78fae0b0a6bf7faed" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="fdb1baad60c1f75038c1a52671fe4ea903e0e3156a8ec86a810f98bb6e602b63" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="2285e14723eb6025548549c29482906c99617338b877f5e82f67b0a9dc449c77" name="cups-debugsource" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="a457a23461d622abc6adf798887c3de104f3c1294e8c4f9c902670440f3e2b49" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="8b716ed1446af2e4579d907f0f02989374f9aff2c3326836561b90806d703286" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="07f9c07f566aa1e65acf0a22331909eafb95e714e8b500ea8cfe2d5fc1e52221" name="cups-devel" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="76d5b6abdf7d2c1fe18398c696d2c28e9c30264970d4da410a22c00e6b1ce0ff" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="553022cad17cf5254436460dcc207916ad52e24472192efe34d93e0f05b97b45" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="679e7a19426440fe86a6febff8c67aa8a2c18ff6d08ab3a261894157049ecfa2" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="4b510ac79f8d367d3add14fb5a9f6d2916ccd9640d288b025be1322892d064ca" name="cups-filters" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="e0600c91bfb6c958a3d6866555e46b6ac29fb6eba604483c6d4c1345c357479e" name="cups-filters-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="e4bd03f96922a94af403f2305375507e06ae353798c4dc68f358643f1b2efac2" name="cups-filters-debugsource" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="f53a155aab6b9f136ecdc5e5e053c530f3159431d07c73e67e6e2e3e766a8e09" name="cups-filters-devel" arch="aarch64">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="193f7ba96df919a14d79a62b5d479fe9cf54e687f536bf8203e829d59e053796" name="cups-filters-help" arch="noarch">
  <version epoch="0" ver="1.28.9" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1.28.9-3" date="1685102400">- fix CVE-2023-24805</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 1.28.9-4" date="1727611200">- fix CVE-2024-47175 CVE-2024-47076 CVE-2024-47176</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.28.9-5" date="1728475200">- fix CVE-2024-47850</changelog>
</package>
<package pkgid="d06e3c1c2bbe65740f56d66ae9365c489c91146575c0ed48a442a25d1c3398f6" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="b83f5832e4e6457f412ddae6ffda40c686e8c7f8adef2d27c82f7b74546f373b" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="95d02544494e523f7f5f0f7ccedb919d3fb3f21856c24348f9fd29b1f3ecb68e" name="cups-help" arch="noarch">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="41de1c76c6bf5903ee23bb1f15ac859458ecaa25d4ec564fa022fa9027c5bb19" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="b2b6cd309d0ed8cd221da7e9a4c79cfd0cbd343c2ca99bf7b79738c39715b530" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="f7be47b535854b62ede591fe938d74eb5fe66e4512969e0b7e6ecd64d6b0155a" name="cups-ipptool" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="d4f1b8871d14c7eb2c64cb10e308dc54fd02aa53169cbfd56c56789e63c9c1dc" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="bf85d6b44eca81494c9516a42d361f8a28f31f374e8930b8c44e1144119121ff" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="e00f79c79f594a5aeeae5b045302629a83dbf568a8e0c0f4bbeef420848ea57c" name="cups-libs" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="e18d6a4cc52c2d621f2990c0cf5d9affb204afe6b5f47936ffc5ffde16d0a74b" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="5fc98f7c63784a0b361e42c2bc817d7ce09afc32fb2aaa982adf7b018dcdea81" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="b290a7153b5cea512cacc24a566dc5c0f9be6c95391914d2c441faea59e52a08" name="cups-lpd" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="b0a65d08df0a035e866827e0bee56a6eef325c3091aaecfe44e1b542a2a384e8" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="12.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
</package>
<package pkgid="4da8e4086e6e6383bf9a2f118da5539abdb86311483925ccfe2dacb38adb0ba5" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="13.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
</package>
<package pkgid="f4fb39bd25252debb1f8beacc5159b672fa48c058f0182147ebd64d9306d1454" name="cups-printerapp" arch="aarch64">
  <version epoch="1" ver="2.4.0" rel="14.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 2.4.0-5" date="1676980800">- fix update conflict of devel and help</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-6" date="1685793600">- fix CVE-2023-32324</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-7" date="1686312000">- fix build error</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei@h-partners.com&gt; - 1:2.4.0-8" date="1687780800">- fix CVE-2023-34241</changelog>
  <changelog author="haomimi &lt;haomimi@uniontech.com&gt; - 1:2.4.0-9" date="1689768000">- DESC:The license is changed to apache 2.0</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 1:2.4.0-10" date="1695384000">- fix CVE-2023-4504</changelog>
  <changelog author="baiguo &lt;baiguo@kylinos.cn&gt; - 1:2.4.0-11" date="1718193600">- fix CVE-2024-35235</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-12" date="1723636800">- Fix regression of fixing CVE-2024-35235 (upstream issue#985)</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:2.4.0-13" date="1728388800">- fix CVE-2024-47175</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.4.0-14" date="1728734400">- fix file conflicts regarding man pages
- add back lspp patch</changelog>
</package>
<package pkgid="26aaaa61c3f352c86f0cb72bc300b401b2bb18f94c0c89365e1addbf1a382bf2" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="a3948636715a87178b26af8de78c761a4220bf8ee1d2fb3f70d501caa6f72b46" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="36.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
</package>
<package pkgid="22100231b7c61805c83dcaca26ef292ccce8faeea284f8bc2f8093345981a9e1" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="38.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
</package>
<package pkgid="7dc13dcc52e444d9cb6d6ad3c0b1278b2b931e63b48275d980c43aa9df95801e" name="curl" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="40.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-39" date="1746532800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libssh: fix freeing of resources in disconnect
       openssl: fix crash on missing cert password</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-40" date="1753704000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:curl_path: make SFTP handle a path like /~ properly</changelog>
</package>
<package pkgid="09882d8d6a9d735737b7f4452c7ea786386695d0a6d2057eea61387eaa549fef" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="db469d1c58769a584197842e4595477a6432711f399579e6f93d0d38e631f614" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="36.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
</package>
<package pkgid="17eccf59d830905f2c1400b889c9208ab443acad9a1a1134ae5133a2cd2cd57c" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="38.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
</package>
<package pkgid="9f22a33ad36ad2f361a61fb0b8cb90387afb6c2076cc6433e93b9f088e49f8ba" name="curl-debuginfo" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="40.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-39" date="1746532800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libssh: fix freeing of resources in disconnect
       openssl: fix crash on missing cert password</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-40" date="1753704000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:curl_path: make SFTP handle a path like /~ properly</changelog>
</package>
<package pkgid="14d329e8ea02da3ad08669e660ce1f31a02945e4bfb6febdbe0bce830abc6e3d" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="d9302a42dbb18808414b9054c0c69468746397aa4c20ebf1337244285b99a3bf" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="36.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
</package>
<package pkgid="7e9100fcfc3cdfc2458db14320891f0d93d2eb6c0aea98e4cc1cc8dc239bb5f8" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="38.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
</package>
<package pkgid="4e2978f3a2c2643c7af7b216e027204f20f684767dfe7b97edaa57bb1f1dba91" name="curl-debugsource" arch="aarch64">
  <version epoch="0" ver="7.79.1" rel="40.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-39" date="1746532800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libssh: fix freeing of resources in disconnect
       openssl: fix crash on missing cert password</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-40" date="1753704000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:curl_path: make SFTP handle a path like /~ properly</changelog>
</package>
<package pkgid="58babad1b8ae4410f005f61e4ef4119fa573fb070577537104974bdc775d20ab" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="33.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 7.79.1-24" date="1697025600">- Type:CVE
- CVE:CVE-2023-38545, CVE-2023-38546
- SUG:NA
- DESC:fix CVE-2023-38545, CVE-2023-38546</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-25" date="1702036800">- Type:CVE
- CVE:CVE-2023-46218 CVE-2023-46219
- SUG:NA
- DESC:fix CVE-2023-46218 CVE-2023-46219</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-26" date="1704283200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:tool_progress: avoid division by zero in parallel progress
       digest: pass over leading spaces in qop values
       Curl_close: call Curl_resolver_cancel to avoid memory-leak
       easy: fix the altsvc init for curl_easy_duphandle
       libssh: if sftp_init fails, don't get the sftp error code
       url: move back the IDN conversion of proxy names
       ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
       http: fix the ::1 comparison for IPv6 localhost for cookies
       multi: free up more data earleier in DONE
       curl_path: bring back support for SFTP path ending in /~
       transfer: refuse POSTFIELDS + RESUME_FROM combo
       tool_operate: refuse (--data or --form) and --continue-at
       http: free the url before storing a new copy
       url: fix null dispname for --connect-to option
       vtls: avoid memory leak if sha256 call fails
       urlapi: make sure zoneid is also duplicated in curl_url_dup</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
</package>
<package pkgid="83432dd0c8fbacd6d28f322bad1ce932a67570ffc2941cdc445cc322dce4051d" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="36.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-27" date="1704456000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:transfer: also stop the sending on closed connection
       openssl: avoid BN_num_bits() NULL pointer derefs</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-28" date="1711713600">- Type:CVE
- CVE:CVE-2024-2398
- SUG:NA
- DESC:fix CVE-2024-2398</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
</package>
<package pkgid="eec8de19a9a6aa80167232ea932e7bc795d79f813ae61ddf980ce22da6b06d69" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="38.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-29" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:paramhlp: fix CRLF-stripping files with "-d @file"
       libssh2: set length to 0 if strdup failed
       openldap: create ldap URLs correctly for IPv6 addresses
       multi: avoid memory-leak risk
       tool_cb_rea: limit rate unpause for -T . uploads
       tool_cfgable: free {proxy_}cipher13_list on exit</changelog>
  <changelog author="yinyongkang &lt;yinyongkang@kylinos.cn&gt; - 7.79.1-30" date="1722427200">- Type:CVE
- CVE:CVE-2024-7264
- SUG:NA
- DESC:fix CVE-2024-7264</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
</package>
<package pkgid="cfa44434d89b61c5eb6587a240a9165bb927f9b650c10af2ac5368cfbc66b0ef" name="curl-help" arch="noarch">
  <version epoch="0" ver="7.79.1" rel="40.oe2203sp4"/>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-31" date="1726142400">- Type:CVE
- CVE:CVE-2024-8096
- SUG:NA
- DESC:fix CVE-2024-8096</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-32" date="1726833600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:url: allow DoH transfers to override max connection limit</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 7.79.1-33" date="1731326400">- Type:CVE
- CVE:CVE-2024-9681
- SUG:NA
- DESC:fix CVE-2024-9681</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-34" date="1732968000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:multi: check that the multi handle is valid in curl_multi_assign</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-35" date="1733745600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:cookie: treat cookie name case sensitively</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-36" date="1735905600">- Type:CVE
- CVE:CVE-2024-11053
- SUG:NA
- DESC:fix CVE-2024-11053</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-37" date="1739016000">- Type:CVE
- CVE:CVE-2025-0167 CVE-2025-0725
- SUG:NA
- DESC:fix CVE-2025-0167 CVE-2025-0725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 7.79.1-38" date="1742904000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:altsvc: avoid integer overflow in expire calculation
       test391: verify --path-as-is with redirect
       urlapi: fix redirect to a new fragment or query (only)
       tool_getparam: clear sensitive arguments better</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 7.79.1-39" date="1746532800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:libssh: fix freeing of resources in disconnect
       openssl: fix crash on missing cert password</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 7.79.1-40" date="1753704000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:curl_path: make SFTP handle a path like /~ properly</changelog>
</package>
<package pkgid="7534ef090628f65d2f89a34149273968dea0c4343795cf98ca4d12d08f2c7826" name="cyrus-sasl" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="4.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-2" date="1728648000">- backport upstream patch to fix char overflow</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-3" date="1734609600">- backport upstream patch to fix heap corruption</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-4" date="1750420800">- cyrus-sasl requires cyrus-sasl-lib with the same version</changelog>
</package>
<package pkgid="6a7bf7484afef04d7b111e53e6e39bedb49c9b08b40d3f86b73e89634ee81d7e" name="cyrus-sasl-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="4.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-2" date="1728648000">- backport upstream patch to fix char overflow</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-3" date="1734609600">- backport upstream patch to fix heap corruption</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-4" date="1750420800">- cyrus-sasl requires cyrus-sasl-lib with the same version</changelog>
</package>
<package pkgid="0614919b198282090ef3d944e3fef38e09d9040b208e662848e7539ff578c0bc" name="cyrus-sasl-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="4.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-2" date="1728648000">- backport upstream patch to fix char overflow</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-3" date="1734609600">- backport upstream patch to fix heap corruption</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-4" date="1750420800">- cyrus-sasl requires cyrus-sasl-lib with the same version</changelog>
</package>
<package pkgid="f2b0aa49cbee0ae85a6017b4fbdadab775a3ab04f2454155fd9a5c0cc0ef318d" name="cyrus-sasl-devel" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="4.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-2" date="1728648000">- backport upstream patch to fix char overflow</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-3" date="1734609600">- backport upstream patch to fix heap corruption</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-4" date="1750420800">- cyrus-sasl requires cyrus-sasl-lib with the same version</changelog>
</package>
<package pkgid="39ef239d79625db27bc963538fdd8b3be292b2765f97feec021a6f1c4f970950" name="cyrus-sasl-help" arch="noarch">
  <version epoch="0" ver="2.1.28" rel="4.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-2" date="1728648000">- backport upstream patch to fix char overflow</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-3" date="1734609600">- backport upstream patch to fix heap corruption</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-4" date="1750420800">- cyrus-sasl requires cyrus-sasl-lib with the same version</changelog>
</package>
<package pkgid="8062d67c729266dec10161f624ac1ab706a9ced912784e78e90849d2fd5f7128" name="cyrus-sasl-lib" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="4.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-2" date="1728648000">- backport upstream patch to fix char overflow</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-3" date="1734609600">- backport upstream patch to fix heap corruption</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-4" date="1750420800">- cyrus-sasl requires cyrus-sasl-lib with the same version</changelog>
</package>
<package pkgid="be8f876c0d719d41593a883f4220e2eddd326c8bf81d20559265fc81161907c2" name="cyrus-sasl-sql" arch="aarch64">
  <version epoch="0" ver="2.1.28" rel="4.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-2" date="1728648000">- backport upstream patch to fix char overflow</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-3" date="1734609600">- backport upstream patch to fix heap corruption</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.1.28-4" date="1750420800">- cyrus-sasl requires cyrus-sasl-lib with the same version</changelog>
</package>
<package pkgid="a259f2f50333351eea7e0cc6bf4918016fa5a48b07f8419ab09d21135a8067fd" name="dcraw" arch="aarch64">
  <version epoch="0" ver="9.28.0" rel="7.oe2203sp4"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.28.0-6" date="1668081600">- Modify invalid source0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.28.0-7" date="1730548800">- fix CVE-2017-13735, CVE-2017-14608, CVE-2018-19655
  patches from fedora</changelog>
</package>
<package pkgid="900adb481068f37966c985541cea4f6731bb33643fda735bafe428990ae61241" name="dcraw-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.28.0" rel="7.oe2203sp4"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.28.0-6" date="1668081600">- Modify invalid source0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.28.0-7" date="1730548800">- fix CVE-2017-13735, CVE-2017-14608, CVE-2018-19655
  patches from fedora</changelog>
</package>
<package pkgid="35d3cc897bb32022b1f19aef84f7d8fa69014ef2447892fd95bab8a5aefbe296" name="dcraw-debugsource" arch="aarch64">
  <version epoch="0" ver="9.28.0" rel="7.oe2203sp4"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.28.0-6" date="1668081600">- Modify invalid source0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.28.0-7" date="1730548800">- fix CVE-2017-13735, CVE-2017-14608, CVE-2018-19655
  patches from fedora</changelog>
</package>
<package pkgid="16ef27f4aab5497c214aa56a8e7e64864a8ffa78faadee56b1c415bad68264e7" name="dcraw-help" arch="noarch">
  <version epoch="0" ver="9.28.0" rel="7.oe2203sp4"/>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.28.0-6" date="1668081600">- Modify invalid source0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.28.0-7" date="1730548800">- fix CVE-2017-13735, CVE-2017-14608, CVE-2018-19655
  patches from fedora</changelog>
</package>
<package pkgid="0a48acb48ba8d373c91effe3b794d994ce815e0fa503904301234a863b5fd052" name="debugedit" arch="aarch64">
  <version epoch="0" ver="5.0" rel="9.oe2203sp4"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 5.0-6" date="1691668800">- Add support for sw_64 and loongarch64</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 5.0-7" date="1732881600">- backport upstream patch to avoid tests failure</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 5.0-8" date="1734004800">- backport patches from upstream</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 5.0-9" date="1745236800">- find-debuginfo: Fix skip_mini (".gnu_debugdata") handling</changelog>
</package>
<package pkgid="162085632734d743606994e53553139a5f944102c786e577c8f6ffe107ef9d81" name="debugedit-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.0" rel="9.oe2203sp4"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 5.0-6" date="1691668800">- Add support for sw_64 and loongarch64</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 5.0-7" date="1732881600">- backport upstream patch to avoid tests failure</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 5.0-8" date="1734004800">- backport patches from upstream</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 5.0-9" date="1745236800">- find-debuginfo: Fix skip_mini (".gnu_debugdata") handling</changelog>
</package>
<package pkgid="7cae58ebce650f900d7dd3e125579943bd6347a7d802ae4623b83419ac69396f" name="debugedit-debugsource" arch="aarch64">
  <version epoch="0" ver="5.0" rel="9.oe2203sp4"/>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 5.0-6" date="1691668800">- Add support for sw_64 and loongarch64</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 5.0-7" date="1732881600">- backport upstream patch to avoid tests failure</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 5.0-8" date="1734004800">- backport patches from upstream</changelog>
  <changelog author="hugel &lt;gengqihu2@h-partners.com&gt; - 5.0-9" date="1745236800">- find-debuginfo: Fix skip_mini (".gnu_debugdata") handling</changelog>
</package>
<package pkgid="00ca4c8e728547c74a38647bdeaab79e4c5bda9be16d99e9df6f1fa952f99c38" name="dejavu-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="3.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.37-2" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.37-3" date="1722513600">- repair SOURCE file loss</changelog>
</package>
<package pkgid="0959d4e0d9cbf5fad8b4a03764db60b8dcc7f6219f1acbed0ef2c212260c0290" name="deltarpm" arch="aarch64">
  <version epoch="0" ver="3.6.3" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.6.3-3" date="1753099200">- enable zstd binary payload support</changelog>
</package>
<package pkgid="500d0dbc3efa7aa11572a8ba6c8acccf093b78c8bdefbe5f3f2b31303755978f" name="deltarpm-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.6.3" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.6.3-3" date="1753099200">- enable zstd binary payload support</changelog>
</package>
<package pkgid="93e39ebd6bf8af34fa6d369ba2e6634e383f065d60e0f5c9328883897b9dc9ec" name="deltarpm-debugsource" arch="aarch64">
  <version epoch="0" ver="3.6.3" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.6.3-3" date="1753099200">- enable zstd binary payload support</changelog>
</package>
<package pkgid="75fca5936a6b028ec41dd3284df8a78383b49bb98d0d31585bc2dc931234454b" name="deltarpm-help" arch="noarch">
  <version epoch="0" ver="3.6.3" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.6.3-3" date="1753099200">- enable zstd binary payload support</changelog>
</package>
<package pkgid="9040129e964da674208aa8f7d9ad1120af7693b46b1c39e3afa9593b1d6737f9" name="dhcp" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="46853aa5da742a87fc801b76dc3bb34631600771886a90c2c6bc3e6fdbc0f9b2" name="dhcp" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="9.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 12:4.4.3-9" date="1742472000">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2023-3341 CVE-2024-11187</changelog>
</package>
<package pkgid="2924028d8394441726a95becdd3e04f6e51099bc55f6a19c9456a8723f602580" name="dhcp-debuginfo" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="c3a3f8f95d493b21db39204a5372a171c33f3571fcd20a088ce5adc7d56274b2" name="dhcp-debuginfo" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="9.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 12:4.4.3-9" date="1742472000">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2023-3341 CVE-2024-11187</changelog>
</package>
<package pkgid="5ebdcebfc2c685af50ec0c52976dd051e625ba6096774508b1e058a023da0de9" name="dhcp-debugsource" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="8f331a1e3ca31966732381b1d0c50983db9fcf971e2f705191b16b298acac330" name="dhcp-debugsource" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="9.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 12:4.4.3-9" date="1742472000">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2023-3341 CVE-2024-11187</changelog>
</package>
<package pkgid="c4e436ab68db0aba80609abcd3a25a9cd3ae6222f8a7afa4ccd8cefafabf6683" name="dhcp-devel" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="a67f63614c6a7e4fd0f4714565772c8cb79ea617e4df1190ddda40530c0b1b32" name="dhcp-devel" arch="aarch64">
  <version epoch="12" ver="4.4.3" rel="9.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 12:4.4.3-9" date="1742472000">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2023-3341 CVE-2024-11187</changelog>
</package>
<package pkgid="a19487e31b7fe00f3611a4341fe5cd91a514f8a74f654d5f0d46f55eddfc9025" name="dhcp-help" arch="noarch">
  <version epoch="12" ver="4.4.3" rel="8.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
</package>
<package pkgid="348da70fc877a5c1d8d0ba65ed60d4dcc7efcbea85582261c56003eaee301c6b" name="dhcp-help" arch="noarch">
  <version epoch="12" ver="4.4.3" rel="9.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:add Restart in dhcpd.service</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-3" date="1688040000">- Type:bugfix
- ID:
- SUG:restart
- DESC:revert the correction about the logic in dhclient</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-4" date="1700827200">- Type:bugfix
- ID:
- SUG:restart
- DESC:delete report url added by other upstream patch to keep pace with DHCP</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-5" date="1704369600">- Type:CVE
- ID:CVE-2022-2795,CVE-2022-38177,CVE-2022-38178
- SUG:restart
- DESC:fix CVE-2022-2795,CVE-2022-38177 and CVE-2022-38178</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 12:4.4.3-6" date="1705752000">- Type:bugfix
- ID:
- SUG:restart
- DESC:IAID is output has hexe if it contains '\' or '"'</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-7" date="1730808000">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:cancel rebind6 timer after ipv6 expire</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 12:4.4.3-8" date="1731326400">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2024-1975,CVE-2024-1737</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 12:4.4.3-9" date="1742472000">- Type:CVE
- ID:NA
- SUG:restart
- DESC:fix CVE-2023-3341 CVE-2024-11187</changelog>
</package>
<package pkgid="dfb95c646080741020dda34974e6b3c451edf2a6e471342d688c5255750e6e0f" name="djvulibre" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="20.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.5.27-20" date="1751889600">- Fix CVE-2025-53367</changelog>
</package>
<package pkgid="9f4a917e73a2d3f3a6d2a3388474441fba95858cfc68f9bc6ec4c4894640f81f" name="djvulibre-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="20.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.5.27-20" date="1751889600">- Fix CVE-2025-53367</changelog>
</package>
<package pkgid="cea3408a24fb7b617116aa220a86919c30abc8349cce28eaa6499d01b85c3b4d" name="djvulibre-debugsource" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="20.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.5.27-20" date="1751889600">- Fix CVE-2025-53367</changelog>
</package>
<package pkgid="fae30355976c01bc52a1b137b90d5a1783c15560c10d787246c0e64acaa88cde" name="djvulibre-devel" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="20.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.5.27-20" date="1751889600">- Fix CVE-2025-53367</changelog>
</package>
<package pkgid="048b024f3140fb395c1c6480ceab4733ca3d58f59ece84e54b55e60fa26ce1c8" name="djvulibre-help" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="20.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.5.27-19" date="1694606400">- Fix CVE-2021-46310,CVE-2021-46312</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.5.27-20" date="1751889600">- Fix CVE-2025-53367</changelog>
</package>
<package pkgid="6a5bc755c0ac9b5f148ea9725abfd2324d98604d56fed56968047521e94377d6" name="dnf" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="22.oe2203sp4"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 4.14.0-19" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 4.14.0-20" date="1721217600">- Limit queries to nevra forms when provided by command and Update the man page entry for the countme option</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 4.14.0-21" date="1723550400">- Fixed incorrect macro within the automatic subpackage</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.14.0-22" date="1725796800">- Drop wrong obsolete tag</changelog>
</package>
<package pkgid="5064ea5035a8a979cdbb67850bd26b73588cce6ad56eaf8456cc41dbd81eee51" name="dnf-automatic" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="22.oe2203sp4"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 4.14.0-19" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 4.14.0-20" date="1721217600">- Limit queries to nevra forms when provided by command and Update the man page entry for the countme option</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 4.14.0-21" date="1723550400">- Fixed incorrect macro within the automatic subpackage</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.14.0-22" date="1725796800">- Drop wrong obsolete tag</changelog>
</package>
<package pkgid="26810a830744a039b9cddb2784568b78c926b15042da7ee5a458adea347a1012" name="dnf-data" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="22.oe2203sp4"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 4.14.0-19" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 4.14.0-20" date="1721217600">- Limit queries to nevra forms when provided by command and Update the man page entry for the countme option</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 4.14.0-21" date="1723550400">- Fixed incorrect macro within the automatic subpackage</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.14.0-22" date="1725796800">- Drop wrong obsolete tag</changelog>
</package>
<package pkgid="7f02aaa1aecbd785240ae9dce87079eb67edaac2c0c1e2cf44725b9274b35a91" name="dnf-help" arch="noarch">
  <version epoch="0" ver="4.14.0" rel="22.oe2203sp4"/>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; 4.14.0-13" date="1678708800">- CVE:NA
- SUG:NA
- DESC:dnf:fix AttributeError when io busy and press ctrl c</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-14" date="1687867200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:cli:allow = in setopt values</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-15" date="1689336000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove patch about pidfile</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 4.14.0-16" date="1691841600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Add provide exception handling</changelog>
  <changelog author="herengui &lt;herengui@kylinsec.com.cn&gt; - 4.14.0-17" date="1692014400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:remove useless patch of loongarch64
       dnf:recreate patch of sw64 and make arch sorted alphabetically</changelog>
  <changelog author="chenhaixing &lt;chenhaixing@huawei.com&gt; - 4.14.0-18" date="1703851200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Fix bash completion due to sqlite changes
           When parsing over a KVP list, do not return till the whole list is parsed</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 4.14.0-19" date="1714996800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver</changelog>
  <changelog author="LuWu &lt;2398491106@qq.com&gt; - 4.14.0-20" date="1721217600">- Limit queries to nevra forms when provided by command and Update the man page entry for the countme option</changelog>
  <changelog author="liyuzhe &lt;liyuzhe@cqsoftware.com.cn&gt; - 4.14.0-21" date="1723550400">- Fixed incorrect macro within the automatic subpackage</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.14.0-22" date="1725796800">- Drop wrong obsolete tag</changelog>
</package>
<package pkgid="e28886328accd7e47e452a7827989891dbdfe1bfb413c88d48672856f553ddce" name="dnsmasq" arch="aarch64">
  <version epoch="0" ver="2.86" rel="11.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-5" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.86-6" date="1682596800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove useless patch</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-7" date="1700654400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-9" date="1728734400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Fix crash when reloading DHCP config on SIGHUP</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-10" date="1734004800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.86-11" date="1742558400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Update DNS records after pruning DHCP leases
       Fix potential memory leak
       Fix possible SIGSEGV in bpf.c
       adapt bugfix allow binding mac with ipv6</changelog>
</package>
<package pkgid="6be77304a9c3c0b688f7e8f5ca01119d95663990b75a1b82c4f72a12f75f4d4e" name="dnsmasq-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.86" rel="11.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-5" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.86-6" date="1682596800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove useless patch</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-7" date="1700654400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-9" date="1728734400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Fix crash when reloading DHCP config on SIGHUP</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-10" date="1734004800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.86-11" date="1742558400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Update DNS records after pruning DHCP leases
       Fix potential memory leak
       Fix possible SIGSEGV in bpf.c
       adapt bugfix allow binding mac with ipv6</changelog>
</package>
<package pkgid="0eb2f95086091f437d152c6e8deda3cf819d6ddbd1c6a34c23bcc17fb01375bf" name="dnsmasq-debugsource" arch="aarch64">
  <version epoch="0" ver="2.86" rel="11.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-5" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.86-6" date="1682596800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove useless patch</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-7" date="1700654400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-9" date="1728734400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Fix crash when reloading DHCP config on SIGHUP</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-10" date="1734004800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.86-11" date="1742558400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Update DNS records after pruning DHCP leases
       Fix potential memory leak
       Fix possible SIGSEGV in bpf.c
       adapt bugfix allow binding mac with ipv6</changelog>
</package>
<package pkgid="ea0a724d47d62ec3887feebfd7e9a298c9df35bdc0a1d7d5b9f84c14e320daf8" name="dnsmasq-help" arch="aarch64">
  <version epoch="0" ver="2.86" rel="11.oe2203sp4"/>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-5" date="1680004800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:backport some upstream patches</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.86-6" date="1682596800">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:remove useless patch</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-7" date="1700654400">- Type:bugfix
- Id:NA
- SUG:NA
- DESC:Fix memory leak when using --dhcp-optsfile with DHCPv6 options</changelog>
  <changelog author="renmingshuai &lt;renmingshuai@huawei.com&gt; - 2.86-8" date="1718107200">- Type:CVE
- Id:CVE-2023-49441
- SUG:NA
- DESC:Fix CVE-2023-49441</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-9" date="1728734400">- Type:bugfix
- CVE:
- SUG:NA
- DESC:Fix crash when reloading DHCP config on SIGHUP</changelog>
  <changelog author="huyizhen &lt;huyizhen2@huawei.com&gt; - 2.86-10" date="1734004800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:backport upstream patches</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 2.86-11" date="1742558400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Update DNS records after pruning DHCP leases
       Fix potential memory leak
       Fix possible SIGSEGV in bpf.c
       adapt bugfix allow binding mac with ipv6</changelog>
</package>
<package pkgid="4b687d892c059234b851e340bf4b22d440035872cb825a2638d6e2f023c84261" name="docker-engine" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="340.oe2203sp4"/>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
</package>
<package pkgid="092369c6f4a5d5f548b993b78c5786871e3c137552df36dea9c0dbc7d9197b64" name="docker-engine" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="344.oe2203sp4"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-341" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try to reconnect when containerd grpc return unexpected EOF</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-344" date="1733140800">- Type:CVE
- CVE:CVE-2024-36621
- SUG:NA
- DESC:fix missing lock in ensurelayer</changelog>
</package>
<package pkgid="32ebebff75cdc5a5b5b79456cd4c0aab72c489d8d27e8d54b6d910e80630e0b7" name="docker-engine" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="345.oe2203sp4"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-341" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try to reconnect when containerd grpc return unexpected EOF</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-344" date="1733140800">- Type:CVE
- CVE:CVE-2024-36621
- SUG:NA
- DESC:fix missing lock in ensurelayer</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-345" date="1733486400">- Type:CVE
- CVE:CVE-2024-36623
- SUG:NA
- DESC:fix CVE-2024-36623</changelog>
</package>
<package pkgid="f4edf42e133907b12863d6831a5583cfb76a3788ffcf345f0d7541819102a025" name="docker-engine-debuginfo" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="340.oe2203sp4"/>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
</package>
<package pkgid="cec67f7cb023afb5c31a1ec31e0aed2077def1cdb62f4f6b6ff4ffd912c65eb8" name="docker-engine-debuginfo" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="344.oe2203sp4"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-341" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try to reconnect when containerd grpc return unexpected EOF</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-344" date="1733140800">- Type:CVE
- CVE:CVE-2024-36621
- SUG:NA
- DESC:fix missing lock in ensurelayer</changelog>
</package>
<package pkgid="d7403589cf1525abb55619ff9240a99d25e1a263a7f60c460ed24b8c66e9d7fe" name="docker-engine-debuginfo" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="345.oe2203sp4"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-341" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try to reconnect when containerd grpc return unexpected EOF</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-344" date="1733140800">- Type:CVE
- CVE:CVE-2024-36621
- SUG:NA
- DESC:fix missing lock in ensurelayer</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-345" date="1733486400">- Type:CVE
- CVE:CVE-2024-36623
- SUG:NA
- DESC:fix CVE-2024-36623</changelog>
</package>
<package pkgid="6c83006394b880dfb1f4fa57c6b07c6db7c2eb18e21d285fc6ba667a225f2367" name="docker-engine-debugsource" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="340.oe2203sp4"/>
  <changelog author="Lu Jingxiao&lt;lujingxiao@huawei.com&gt; - 18.09.0-330" date="1696852800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix COPY --from should preserve ownership</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-331" date="1697112000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add delay after freeze</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
</package>
<package pkgid="d344017931f765ba7b88202cd0d3587d357990b998ed3caa4c19a8e8dde76718" name="docker-engine-debugsource" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="344.oe2203sp4"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-332" date="1704196800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:sync patches from upstream</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-341" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try to reconnect when containerd grpc return unexpected EOF</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-344" date="1733140800">- Type:CVE
- CVE:CVE-2024-36621
- SUG:NA
- DESC:fix missing lock in ensurelayer</changelog>
</package>
<package pkgid="4a89ed7dc60e9f4d16b76993fa2c053e6600a39f49ea7ac149160b2da1389d86" name="docker-engine-debugsource" arch="aarch64">
  <version epoch="2" ver="18.09.0" rel="345.oe2203sp4"/>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-333" date="1710849600">- Type:CVE
- CVE:CVE-2024-24557
- SUG:NA
- DESC:fix CVE-2024-24557</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-334" date="1712923200">- Type:CVE
- CVE:CVE-2024-29018
- SUG:NA
- DESC:fix CVE-2024-29018</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-335" date="1715169600">- Type:CVE
- CVE:CVE-2024-32473
- SUG:NA
- DESC:fix CVE-2024-32473</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-336" date="1718280000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:modify runc rpm package name to runc</changelog>
  <changelog author="chenjiankun&lt;chenjiankun1@huawei.com&gt; - 18.09.0-338" date="1721044800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Ignore SIGURG on Linux</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 18.09.0-339" date="1721995200">- Type:CVE
- CVE:CVE-2024-41110
- SUG:NA
- DESC:fix CVE-2024-41110</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-340" date="1722600000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add clone3 seccomp whitelist for arm64</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-341" date="1725105600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:try to reconnect when containerd grpc return unexpected EOF</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-344" date="1733140800">- Type:CVE
- CVE:CVE-2024-36621
- SUG:NA
- DESC:fix missing lock in ensurelayer</changelog>
  <changelog author="zhongjiawei&lt;zhongjiawei1@huawei.com&gt; - 2:18.09.0-345" date="1733486400">- Type:CVE
- CVE:CVE-2024-36623
- SUG:NA
- DESC:fix CVE-2024-36623</changelog>
</package>
<package pkgid="9d2816219a4e0bd846e6a86f0c5ebb4e61c5e124505f0adf6df107d3a7c9c14e" name="dovecot" arch="aarch64">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="1831e729ff464f7ee10e5f2d041881a564d2925c50db19565a24e2be3ef5f552" name="dovecot-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="3c1c9318b52b3d8f71b0b56a09d0bb3e86790363057ddb6e25b77b313fe7f872" name="dovecot-debugsource" arch="aarch64">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="181c2d32badea60ba4d83225cb2c1e6a8f39638dd37a0b2da3fd5f7ee80def0c" name="dovecot-devel" arch="aarch64">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="755f36bc13623cf5757ab12f11cae1356f30ad260ec28e0fb788b420e63a8c5e" name="dovecot-help" arch="aarch64">
  <version epoch="1" ver="2.3.15" rel="6.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 1:2.3.15-5" date="1664366400">- Fix CVE-2022-30550</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:2.3.15-6" date="1723636800">- fix CVE-2024-23184, CVE-2024-23185</changelog>
</package>
<package pkgid="236e11349039986c4d7516016d7e109881b63fec122a65ca99dfbb68fbb7ce8f" name="dpdk" arch="aarch64">
  <version epoch="0" ver="21.11" rel="77.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="4f31a798b17ae22691e6eb49ecc961d510c8187cab2aed6a9450df84ce9a123d" name="dpdk" arch="aarch64">
  <version epoch="0" ver="21.11" rel="79.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
</package>
<package pkgid="80f3a9ba86b27923ad571ffb5aadc2c4f293e7556c071cde87070d80eb597e8a" name="dpdk" arch="aarch64">
  <version epoch="0" ver="21.11" rel="81.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438400">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438401">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
</package>
<package pkgid="9596342955ff5b0181b15e4f95d422039a4ce5fbfad3cbc72ee031acfbef8bf2" name="dpdk" arch="aarch64">
  <version epoch="0" ver="21.11" rel="84.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611200">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-82" date="1735905600">net/af_xdp: support tx multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-83" date="1737201600">net/af_xdp: support tx metadata</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 21.11-84" date="1741089600">config: arm adapt RTE_NUMA_NODE_MAX to 8</changelog>
</package>
<package pkgid="ac7c9ae436889785e95368db8e4dc6a356d69c2a63a4cd6c2cff1d757c060d79" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="21.11" rel="77.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="4344b9e7c8010a4edf516b32499884d8894ba3ff4fb7cf91d5820b4bc8bb11f8" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="21.11" rel="79.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
</package>
<package pkgid="80829f12a6e1a2b0ed3216de079a7890acc50645b8f0099dcda8053accee7bfd" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="21.11" rel="81.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438400">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438401">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
</package>
<package pkgid="27571c83b18234ebc8cecd6ecef3dbcc57c2eb61a4ba9657264df75f0f3370df" name="dpdk-debuginfo" arch="aarch64">
  <version epoch="0" ver="21.11" rel="84.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611200">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-82" date="1735905600">net/af_xdp: support tx multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-83" date="1737201600">net/af_xdp: support tx metadata</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 21.11-84" date="1741089600">config: arm adapt RTE_NUMA_NODE_MAX to 8</changelog>
</package>
<package pkgid="8da8a50cb9f35e3dd81593d84ae218df00862f68c94e2edcc487739c49140833" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="21.11" rel="77.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="fafc3fae054c25bc92a20978b08ff1ac008b22e9644f631806423a0283a88523" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="21.11" rel="79.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
</package>
<package pkgid="5290475397e26e891bb2864096859ea68d09a4bb7846d364977dcf438ef401b6" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="21.11" rel="81.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438400">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438401">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
</package>
<package pkgid="2ab37a9b35635a7c64071e6ee59a15106ff3ab9b1667a39cea0c00a40711e08e" name="dpdk-debugsource" arch="aarch64">
  <version epoch="0" ver="21.11" rel="84.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611200">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-82" date="1735905600">net/af_xdp: support tx multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-83" date="1737201600">net/af_xdp: support tx metadata</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 21.11-84" date="1741089600">config: arm adapt RTE_NUMA_NODE_MAX to 8</changelog>
</package>
<package pkgid="2968259c7f3ae5b8ce48c0ecf3c3149a724c324bf518309eff1705a4f60dd5d4" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="21.11" rel="77.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="b85bf045c91b85350125fc9736bbdb678f60014d9c8e6edeb22d1d6cb4a3f28e" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="21.11" rel="79.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
</package>
<package pkgid="0adbbb72b11ee26aacd4d13a3c31daed5958e1b5c66748f2afe9051eda89585d" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="21.11" rel="81.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438400">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438401">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
</package>
<package pkgid="bc3a895b0a55c47f72997bc6e40ce2c5dca4429692a78b564ae374a7571fa408" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="21.11" rel="84.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611200">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-82" date="1735905600">net/af_xdp: support tx multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-83" date="1737201600">net/af_xdp: support tx metadata</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 21.11-84" date="1741089600">config: arm adapt RTE_NUMA_NODE_MAX to 8</changelog>
</package>
<package pkgid="f47575ee2c16ea60461d66a6d3a90bf183a0b373399d0ee6bda4c4e9fe16933d" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="77.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="b76ddebc477b57bc64c042af026e551b44f78c199eef29dd344cff4c0407a007" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="79.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
</package>
<package pkgid="f900911d6769456287ae2665a88218ac4a8ce4fb010a6453eec1d41f7dac07f0" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="81.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438400">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438401">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
</package>
<package pkgid="70c764db4215febbc03bf52045aa6b11baa5d3d7daffa306f166d89d39193ad5" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="21.11" rel="84.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611200">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-82" date="1735905600">net/af_xdp: support tx multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-83" date="1737201600">net/af_xdp: support tx metadata</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 21.11-84" date="1741089600">config: arm adapt RTE_NUMA_NODE_MAX to 8</changelog>
</package>
<package pkgid="967f400990259dee5c5114ce263fa01a24fbe751dad15377e1483a8e98f0917e" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="21.11" rel="77.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-68" date="1720699200">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - mlx5: device should be started to set the flow</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-69" date="1723550400">Sync some patches from upstream about bugfix, modifies
 are as follow:
 - net/hns3: check Rx DMA address alignmnent</changelog>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
</package>
<package pkgid="cb073560595e67d2a1bd4eaed145dbcc7372670fc6340b57ca650c7436fb5e48" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="21.11" rel="79.oe2203sp4"/>
  <changelog author="hankangknag &lt;hankangknag5@huawei.com&gt; - 21.11-70" date="1725624000">Sync some patches from upstream about bugfix, modifies are as follow:
- net/af_xdp: parse UMEM map info from mempool
- bpf: disable on 32-bit x86
- net/af_xdp: remove unused local statistic
- net/af_xdp: fix stats reset
- net/af_xdp: count mbuf allocation failures
- net/af_xdp: fix port ID in Rx mbuf
- net/af_xdp: support AF_XDP device plugin pinned maps
- net/af_xdp: fix multi-interface support for k8s
- net/af_xdp: fix leak on XSK configuration failure
- net/af_xdp: fix memzone leak on config failure
- net/af_xdp: avoid error log for virtual interfaces
- net/af_xdp: fix Rx and Tx queue state
- net/af_xdp: fix missing UMEM feature
- rework atomic intrinsics fetch operations
- build: clarify configuration without IOVA field in mbuf
- net/af_xdp: fix socket handler validation
- net/af_xdp: support CNI Integration
- net/af_xdp: parse NUMA node ID from sysfs
- drivers: mark SW PMDs to support disabling IOVA as PA
- net/af_xdp: make compatible with libbpf 0.8.0
- net/af_xdp: add log on XDP program removal failures
- net/af_xdp: avoid version-based check for program load
- net/af_xdp: avoid version-based check for shared UMEM
- net/af_xdp: make clear which libxdp version is required
- net/af_xdp: move XDP library presence flag setting
- net/af_xdp: allow using copy mode in XSK
- net/af_xdp: fix shared UMEM fill queue reserve
- net/af_xdp: fix custom program loading with multiple queues
- net/af_xdp: reserve fill queue before socket create
- net/af_xdp: ensure socket is deleted on Rx queue setup error
- net/af_xdp: make compatible with libbpf &gt;= 0.7.0
- net/af_xdp: add missing trailing newline in logs
- net/af_xdp: allow probing when multiprocess is disabled
- ethdev: introduce generic dummy packet burst function
- net/af_xdp: re-enable secondary process support
- net/af_xdp: make UMEM configure more readable
- net/af_xdp: use libxdp if available
- net/af_xdp: fix build with -Wunused-function</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-71" date="1727438400">config: arm adapt RTE_MAX_LCORE to 640</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438401">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438402">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
</package>
<package pkgid="bf80b6895c0cd0bcbb16ce811bee27ab8b9a31679c5b7cde8d06bccb7d89afaf" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="21.11" rel="81.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-72" date="1727438400">af_xdp: support recv multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-73" date="1727438401">net/af_xdp: add interrupt support</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-74" date="1727611200">af_xdp: del XDP_USE_SG and XDP_PKT_CONTD definition</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611201">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
</package>
<package pkgid="063c1c7150a25dd7d654a5cf3160578b63b5388447b8da57922e25cb3d99a64d" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="21.11" rel="84.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-75" date="1727611200">af_xdp: build XDP_USE_SG and XDP_PKT_CONTD require kernel-headers</changelog>
  <changelog author="lifeifei &lt;lifeifei@kylinos.cn&gt; - 21.11-76" date="1727697600">create weak dependency for ko files</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-77" date="1728475200">af_xdp: fix mbuf ol_flags not init</changelog>
  <changelog author="chenyi &lt;chenyi211@huawei.com&gt; - 21.11-78" date="1729684800">Sync some patches from upstream about bugfix, modifies are as follow:
- bus/pci: fix UIO resource mapping in secondary process</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-79" date="1730376000">net/af_xdp: fix getsockopt ENOTSOCK error</changelog>
  <changelog author="chendexi &lt;chendexi@kylinos.cn&gt; - 21.11-80" date="1734523200">- Change %post script to %posttrans.</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-81" date="1735041600">- net/virtio: fix Rx checksum calculation</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 21.11-82" date="1735905600">net/af_xdp: support tx multi-buffer</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 21.11-83" date="1737201600">net/af_xdp: support tx metadata</changelog>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 21.11-84" date="1741089600">config: arm adapt RTE_NUMA_NODE_MAX to 8</changelog>
</package>
<package pkgid="4fca95acb6121074a86c3fc6cb63da4dd4decea615c9072ffa19d449d6d4b98b" name="dpu-utilities-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10" rel="3.oe2203sp4"/>
  <changelog author="Guangxing Deng &lt;dengguangxing@huawei.com&gt; 1.6-1" date="1701432000">- Upgrade dpu-utilities version to 1.6</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-2" date="1702123200">- fix some problem of fifo, resolve problem in libvirt</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719316800">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
</package>
<package pkgid="a1c502243d2723d179778e800790147c8b10ae9c48cd40afdd9a3b7b0b5b94c5" name="dpu-utilities-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10" rel="4.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-2" date="1702123200">- fix some problem of fifo, resolve problem in libvirt</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719316800">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
</package>
<package pkgid="10c4f3fb95b135dc80dc1ce662eabdb2f9c77cb21414fbf346b3c80350433d8b" name="dpu-utilities-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10" rel="5.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
</package>
<package pkgid="45164b20e3ac48cd4edcedcb7a6f5cd44895154374e5d8673d85d28bd8f1ec87" name="dpu-utilities-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10" rel="6.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
  <changelog author="l30022887 &lt;liweiqiang24@huawei.com&gt; 1.10-6" date="1729512000">- resolve migration issues</changelog>
</package>
<package pkgid="e10dc7b39fd2aa0d0db9522960d16c5dc6a27a85a555a981ddab8e6541654121" name="dpu-utilities-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10" rel="7.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
  <changelog author="l30022887 &lt;liweiqiang24@huawei.com&gt; 1.10-6" date="1729512000">- resolve migration issues</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-7" date="1732276800">- Fix rwlock caused schedule bug, change to semaphore</changelog>
</package>
<package pkgid="692ca843d71d5c6f620e3d3789095844f4d8309ad8b1865f6f472b43a928b9d3" name="dpu-utilities-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10" rel="3.oe2203sp4"/>
  <changelog author="Guangxing Deng &lt;dengguangxing@huawei.com&gt; 1.6-1" date="1701432000">- Upgrade dpu-utilities version to 1.6</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-2" date="1702123200">- fix some problem of fifo, resolve problem in libvirt</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719316800">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
</package>
<package pkgid="7f6a64f9c8983534c559fceb24619c81e320e2d322c945a42391f0823d7083a2" name="dpu-utilities-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10" rel="4.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-2" date="1702123200">- fix some problem of fifo, resolve problem in libvirt</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719316800">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
</package>
<package pkgid="4173b0989776e7cecd00f0314f0ccd34e73a437e6aa00dcddff4f95a2ac5036e" name="dpu-utilities-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10" rel="5.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
</package>
<package pkgid="843d282132b1f7162b0ccac7e3937aae413e1b67aa959f7825b0c78798fff394" name="dpu-utilities-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10" rel="6.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
  <changelog author="l30022887 &lt;liweiqiang24@huawei.com&gt; 1.10-6" date="1729512000">- resolve migration issues</changelog>
</package>
<package pkgid="d24a0894979fd76b8daabc5fc3094683428d3486c40c07cf319855b2537d3ac4" name="dpu-utilities-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10" rel="7.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
  <changelog author="l30022887 &lt;liweiqiang24@huawei.com&gt; 1.10-6" date="1729512000">- resolve migration issues</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-7" date="1732276800">- Fix rwlock caused schedule bug, change to semaphore</changelog>
</package>
<package pkgid="b292919990eef59d15cbd676c77430e545a7c6f68a8411a9527a02d1b98d734b" name="dpuos-imageTailor-config" arch="aarch64">
  <version epoch="0" ver="1.10" rel="3.oe2203sp4"/>
  <changelog author="Guangxing Deng &lt;dengguangxing@huawei.com&gt; 1.6-1" date="1701432000">- Upgrade dpu-utilities version to 1.6</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-2" date="1702123200">- fix some problem of fifo, resolve problem in libvirt</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719316800">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
</package>
<package pkgid="8388c3d535f7ba08068e72aa22b3f8f86683f512ebc52dc314830c06cb820fb1" name="dpuos-imageTailor-config" arch="aarch64">
  <version epoch="0" ver="1.10" rel="4.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-2" date="1702123200">- fix some problem of fifo, resolve problem in libvirt</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719316800">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
</package>
<package pkgid="efd6b13450131b3e13f81f3e7dff7fc46da9cd7af5256b1d7df6ff15fda54652" name="dpuos-imageTailor-config" arch="aarch64">
  <version epoch="0" ver="1.10" rel="5.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-3" date="1702468800">- Update some bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
</package>
<package pkgid="2284ebd3036a74204bf455b5ddf17a804b040ae1e0e5b85ff17d7ef4493b8335" name="dpuos-imageTailor-config" arch="aarch64">
  <version epoch="0" ver="1.10" rel="6.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-4" date="1702555200">- Fix suspend and fd leak of fifo</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
  <changelog author="l30022887 &lt;liweiqiang24@huawei.com&gt; 1.10-6" date="1729512000">- resolve migration issues</changelog>
</package>
<package pkgid="7b37d66179a1cd73fa7cb92906c9f51fadf4873668d7f68c30d1aee72d879210" name="dpuos-imageTailor-config" arch="aarch64">
  <version epoch="0" ver="1.10" rel="7.oe2203sp4"/>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-5" date="1702728000">- fix event misalignment problem</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-6" date="1702728001">- Update readme description and fix a bug</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.6-7" date="1703592000">- Update recent bugfixes</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-1" date="1716552000">- Update to v1.10 for some features and bugfix</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-2" date="1719230400">- Refactor syscall wrapper for aarch64 reduce the memory</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-3" date="1720612800">- Fix readdir bug in devtmpfs</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-4" date="1721736000">- Change the maximum number of qtfs links from 16 to 64</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-5" date="1725969600">- Add compile option for epoll proxy thread</changelog>
  <changelog author="l30022887 &lt;liweiqiang24@huawei.com&gt; 1.10-6" date="1729512000">- resolve migration issues</changelog>
  <changelog author="liqiang &lt;liqiang64@huawei.com&gt; 1.10-7" date="1732276800">- Fix rwlock caused schedule bug, change to semaphore</changelog>
</package>
<package pkgid="fb98b48beb04f5af16c04160e63435124b9475c9bdaede3da379aa6ec9c8e9f5" name="drpmsync" arch="aarch64">
  <version epoch="0" ver="3.6.3" rel="3.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.6.3-3" date="1753099200">- enable zstd binary payload support</changelog>
</package>
<package pkgid="bed8463bd7d5822a039b5ca39445f6ab495bce0c2d620d87817ad3990475d914" name="ebtables" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="12.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.11-11" date="1701086400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:rebuild package to ensure that the upgrade between branches is normal</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-12" date="1722340800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-restore --noflush failed when ebtables is uninstall</changelog>
</package>
<package pkgid="650313555a4d6e84879f6170bf9e20000f4d7a171e503dc0d4fca85c6b14d62c" name="ebtables-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="12.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.11-11" date="1701086400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:rebuild package to ensure that the upgrade between branches is normal</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-12" date="1722340800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-restore --noflush failed when ebtables is uninstall</changelog>
</package>
<package pkgid="85c9b3ab2e59f6e84fef4801b7f254d72d8d62f44d6d8976e5737d06cecb8730" name="ebtables-debugsource" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="12.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.11-11" date="1701086400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:rebuild package to ensure that the upgrade between branches is normal</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-12" date="1722340800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-restore --noflush failed when ebtables is uninstall</changelog>
</package>
<package pkgid="64a6d56bc89196e6b8eea07f68644b7c8efe55ad0fc951e3a1e2575dc9f0f859" name="ebtables-help" arch="aarch64">
  <version epoch="0" ver="2.0.11" rel="12.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 2.0.11-6" date="1667476800">- Type:feature
- CVE:NA
- SUG:NA
- DESC:change lib64 to lib when in sw64 architecture</changelog>
  <changelog author="yanglu&lt;yanglu72@h-partners.com&gt; - 2.0.11-7" date="1669636800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:replace with tar from source0</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-8" date="1688126400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix install error</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 2.0.11-9" date="1691409600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix post error "No such file or directory"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-10" date="1695211200">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:Fix: if libvirt and ebtables are installed at the same time, ping the operation prompts "sendmsg: Operation not permitted".</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.0.11-11" date="1701086400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:rebuild package to ensure that the upgrade between branches is normal</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.0.11-12" date="1722340800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ebtables-restore --noflush failed when ebtables is uninstall</changelog>
</package>
<package pkgid="167e24a56cf2384b51853536115f938f99a5c4df885c2c38f3504a0834dd40b3" name="ed25519-java" arch="noarch">
  <version epoch="0" ver="0.3.0" rel="5.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.3.0-5" date="1742558400">- Fix CVE-2020-36843</changelog>
</package>
<package pkgid="8cf3f096e3c5835879f7326505236ba7c34f0b107e8d4fed15587ac0c2b64ab4" name="ed25519-java-javadoc" arch="noarch">
  <version epoch="0" ver="0.3.0" rel="5.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 0.3.0-5" date="1742558400">- Fix CVE-2020-36843</changelog>
</package>
<package pkgid="97a2f7377aec6f79671c31b208125c5833a2f23170172cbe3f927595cca61099" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="19.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="95657c1b7e6d191c299bed876fa15a656e87e086c9da4eb401b1e9b1d724107a" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="20.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="553daaae647b8c4a570c635a464b7605ad46368d9ca152785e06b23d4d7ca5f4" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="21.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="42ab3d07a85e44a97e2c82c7935c6e91c07f8afed4b7bd3c92e77c703ee09f72" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="22.oe2203sp4"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="27fd0902e3c69e5aec4a5b8fd1ce79e3cfc8b9d1987a4447dfa6c88c8028bc1e" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="23.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
</package>
<package pkgid="818977c03b050c3c3e8e4a8216f343fd875a44e0551cc67bfac940971ff0c292" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="25.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
</package>
<package pkgid="ad48bf18befc65cf8e0152f4ca21cad101475215b8bd600435d416b845774371" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="26.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
</package>
<package pkgid="6c655505cd7417a3e709b753839e6594a02f761b70f6916ea42bc7d2d359adf2" name="edk2-aarch64" arch="noarch">
  <version epoch="0" ver="202011" rel="27.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-27" date="1751025600">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="7946c7f52237218bd9666356f77061315a877dcbfc02bd16378dc2489090589c" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="19.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="181b5e6f66a6aca489cc9128ee6a4e6936a88a5a7cdcbb88daffda07ff39d90a" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="20.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="53de3fd20c5289c8251b922066662b377cdf6aee3124eaf62893008ac0a16051" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="21.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="a1c4b08bb5ff55b84af20c36d020912c6669db9013d6fee86cbf67669a57c309" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="22.oe2203sp4"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="488dd051bf1684f9f5a849813323699359150193821131384d9534663dd53131" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="23.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
</package>
<package pkgid="dc3ba5f4da35e5b43ae6a8433950294e9daabb4120e5b0904d66ea92c7f0176a" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="25.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
</package>
<package pkgid="4bea641733db2c516eb1a14c00979145bd4b2256395c0ff6605e7b22711a6f95" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="26.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
</package>
<package pkgid="e7fabe2c9f0ff97620b5c3e7f32dde0324ff2ee3ab8cc211a754c510d86896d5" name="edk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="202011" rel="27.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-27" date="1751025600">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="b6678d435bfed42af4af4c6b323dd3e0d051628bffe7b6067681db5760e8252f" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="19.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="f94e53c099076539bb6de40bc5d6cd0a718f5fce96a20fa9e61b32b8b909946a" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="20.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="15c80260f35cab8e1f0b02662155d31179a209882791ade76ecab7f4d4736b82" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="21.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="b2148c10860064c46421d3b64f82ea94d1ec655a2b71880420a0b8af6825b2d4" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="22.oe2203sp4"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="a43c662f0781bfe4f17e4f6890cf2445a4aee014650cfc0082158fea416b4411" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="23.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
</package>
<package pkgid="a028f3a4fff0e0b920204578b0be701a7aad0570ee20f989b9e34a07944c9033" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="25.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
</package>
<package pkgid="27da3fcb6d3c59b6386f651dada0dbce92c389e82deed4b64a72397907d3990c" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="26.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
</package>
<package pkgid="cc8c7cdb503a97c35ef429127ebc3d9285773128541ed792c7681a4953a66559" name="edk2-debugsource" arch="aarch64">
  <version epoch="0" ver="202011" rel="27.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-27" date="1751025600">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="f6a53a761702bdd2a445be0aed489f5fe424b422e9cde898e3eaa02de74a5bcd" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="19.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="2df962a4e16d8148cb516937c62e06dcaaa8f7d6b76c44536d5d9d9d07651b6c" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="20.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="65a0fa2ac7d9e513a38b8b8226efc7dcbc5592b2029ba286d96eff043bf0eb0a" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="21.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="8e8b6d31f991a1878c540379305e3e7b691e77506a594f237e3c98e8ee955d04" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="22.oe2203sp4"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="6e08e3e4ed744fc7d196d4968d09f9f24264d10c42464d2e99d77de2737c476b" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="23.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
</package>
<package pkgid="f78272d71408216f0448da5db4bd7e188e070644a0681c78c96a6e75ebdc6fc8" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="25.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
</package>
<package pkgid="87beed5b6c3dba589a12e1bd73a7d6c13eaeb4a54656f636687030608ec745e9" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="26.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
</package>
<package pkgid="400778a62058fc6851867efa670ad63ab4c9d940499747a86a0abd99e3d35790" name="edk2-devel" arch="aarch64">
  <version epoch="0" ver="202011" rel="27.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-27" date="1751025600">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="a3ea64ff87f5b51cee2b448c5b8678c40cf4fcaad9248d1587cf54dd3662ff06" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="19.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-10" date="1677412800">- fix CVE-2023-0215</changelog>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412801">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
</package>
<package pkgid="e69b2c776aa45fc7a1c84adfceabb2f696ce9f19e05f62ed31898ec4263d104d" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="20.oe2203sp4"/>
  <changelog author="chenhuiying&lt;chenhuiying4@huawei.com&gt; - 202011-11" date="1677412800">- fix CVE-2023-0286</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
</package>
<package pkgid="a5f7091b35685fda30787229c23673b29679df8065ac5327baa9e68377cb4de0" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="21.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-12" date="1678449600">- fix CVE-2022-4304</changelog>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
</package>
<package pkgid="cf467765f69790fa4e720372a4e83d5edef159b988f2897a08510cc27cfb81e5" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="22.oe2203sp4"/>
  <changelog author="Jiabo Feng&lt;fengjiabo1@huawei.com&gt; - 202011-13" date="1689249600">- solving the compilation failure problem of gcc 12.3.0</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
</package>
<package pkgid="6e3af6bbab3ccd81433de49e72488f0158ec1dd548019b2ba1cf5963607b0d8d" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="23.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-14" date="1708430400">- fix CVE-2023-0464、CVE-2023-0465、CVE-2023-0466、CVE-2023-2650、CVE-2023-3446、CVE-2023-3817、CVE-2024-0727</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-15" date="1709640000">- fix CVE-2022-36763、CVE-2022-36764、CVE-2022-36765</changelog>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
</package>
<package pkgid="22342ae40b6afc4d712d8a7ca1897933f601db2c822aca0a701fe808f9281772" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="25.oe2203sp4"/>
  <changelog author="yexiao&lt;yexiao7@huawei.com&gt; - 202011-16" date="1709812800">- fix CVE-2023-45229、CVE-2023-45230、CVE-2023-45231、CVE-2023-45232、CVE-2023-45233、CVE-2023-45234、CVE-2023-45235</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
</package>
<package pkgid="6d8df9c86432ea49677f1750e161ecb537b536809d18558c624a4f8140c4847c" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="26.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-17" date="1713182400">- fix CVE-2024-2511</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
</package>
<package pkgid="c5150477da704f6620925e39b93607ee0650e4e63e4e7ac3adca96d8cc38da14" name="edk2-help" arch="noarch">
  <version epoch="0" ver="202011" rel="27.oe2203sp4"/>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-18" date="1718193600">- fix CVE-2024-1298</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-19" date="1720699200">- fix CVE-2024-5535</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-20" date="1725364800">- fix CVE-2021-3712、CVE-2022-0778</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 202011-21" date="1728475200">- fix CVE-2024-38796</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-22" date="1728907200">- fix CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-23" date="1740571200">- fix CVE-2024-13176、CVE-2024-4741</changelog>
  <changelog author="shenyage&lt;shenyage1@huawei.com&gt; - 202011-24" date="1741521600">- fix bugs for CVE-2023-45236、CVE-2023-45237</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-25" date="1743163200">- fix CVE-2024-9143</changelog>
  <changelog author="huyu&lt;huyu70@h-partners.com&gt; - 202011-26" date="1745755200">- fix CVE-2024-38797</changelog>
  <changelog author="taolinghongfei &lt;taolinghongfei@h-partners.com&gt; - 202011-27" date="1751025600">- fix CVE-2023-5678</changelog>
</package>
<package pkgid="984337a0efecdaa23e1ae8b381eec863bc1f811a3121e9b34210b3f8f68220e4" name="efl" arch="aarch64">
  <version epoch="0" ver="1.25.1" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.25.1-2" date="1722859200">- Build ecore_sdl versioned so. So efl no longer requires efl-devel</changelog>
</package>
<package pkgid="7e7c0c1d44128633cc941e6e9a28c5164488bd460224d6cf4fe56f6b0f71faf6" name="efl-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.25.1" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.25.1-2" date="1722859200">- Build ecore_sdl versioned so. So efl no longer requires efl-devel</changelog>
</package>
<package pkgid="c60c45e52b328b009530a3854db33b9b1c78e830bf458156530effc53d71eb47" name="efl-debugsource" arch="aarch64">
  <version epoch="0" ver="1.25.1" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.25.1-2" date="1722859200">- Build ecore_sdl versioned so. So efl no longer requires efl-devel</changelog>
</package>
<package pkgid="03f778c71e1b5e96aab3412ddae702ee43eee6a92a2f6a625279d2e6bc3591cd" name="efl-devel" arch="aarch64">
  <version epoch="0" ver="1.25.1" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.25.1-2" date="1722859200">- Build ecore_sdl versioned so. So efl no longer requires efl-devel</changelog>
</package>
<package pkgid="d35836dfbacdbd617108dc814d12e563fcd13e695ee11be1fee5cb253b08f957" name="elfutils" arch="aarch64">
  <version epoch="0" ver="0.185" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
</package>
<package pkgid="d780720c5677b475cdb0d1835bb16ea40de219d8b21f94325ba68e960783044e" name="elfutils" arch="aarch64">
  <version epoch="0" ver="0.185" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.185-20" date="1739707200">- fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377</changelog>
</package>
<package pkgid="1baf601f7dea2fd7728bc8d090df29334802c4c9f276ea9d3ca217a3d688f781" name="elfutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.185" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
</package>
<package pkgid="2b7b99ede0dd207fdcf0516fec598c0d800cb88468a8deca50eb0e72e3363abe" name="elfutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.185" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.185-20" date="1739707200">- fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377</changelog>
</package>
<package pkgid="e37bbe603ce95499e84913d3de92f7cb0e4a8eab9a35d53354d8e1578f87ef47" name="elfutils-debuginfod" arch="aarch64">
  <version epoch="0" ver="0.185" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
</package>
<package pkgid="71bb99387eb90a70722655b4a32f127f90c10caf3afa77f7d47012da68a4346c" name="elfutils-debuginfod" arch="aarch64">
  <version epoch="0" ver="0.185" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.185-20" date="1739707200">- fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377</changelog>
</package>
<package pkgid="978147e207f43aee1bcc3150a7aa4a3029af187dfb092b45aa061363958d816b" name="elfutils-debuginfod-client" arch="aarch64">
  <version epoch="0" ver="0.185" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
</package>
<package pkgid="6d0d669c03d844ffcf276007d5462939cb4ca34854e8eeddca81622631dc87f2" name="elfutils-debuginfod-client" arch="aarch64">
  <version epoch="0" ver="0.185" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.185-20" date="1739707200">- fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377</changelog>
</package>
<package pkgid="e4449dfa303b3797e0bb62281c16ad5b7431b302bc17287690c8ab88f85722a2" name="elfutils-debuginfod-client-devel" arch="aarch64">
  <version epoch="0" ver="0.185" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
</package>
<package pkgid="3d590095bd54833c827cdd4d66fc137c13d3b2b39bb28b4117fffc9e381214ac" name="elfutils-debuginfod-client-devel" arch="aarch64">
  <version epoch="0" ver="0.185" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.185-20" date="1739707200">- fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377</changelog>
</package>
<package pkgid="eb40b061797a236d06420a5ad7014363c71cd202df2a348e0f4094229fd7c592" name="elfutils-debugsource" arch="aarch64">
  <version epoch="0" ver="0.185" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
</package>
<package pkgid="53aef18eac7ffe26c6e554bba38325e2772b66cdd0268765167ed05cb1997fcf" name="elfutils-debugsource" arch="aarch64">
  <version epoch="0" ver="0.185" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.185-20" date="1739707200">- fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377</changelog>
</package>
<package pkgid="a9c16463b154034e33b39bdde009098e6b192958b5776227481aa4195e7611df" name="elfutils-devel" arch="aarch64">
  <version epoch="0" ver="0.185" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
</package>
<package pkgid="cb75b58d36afe28f6a5d54124c4bc5227b080f2e1d3301751092710eca293782" name="elfutils-devel" arch="aarch64">
  <version epoch="0" ver="0.185" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.185-20" date="1739707200">- fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377</changelog>
</package>
<package pkgid="38da3f92c2e2c60b9b2bf9b64425a33ee3e11491f52542403d7499a7001d94cf" name="elfutils-extra" arch="aarch64">
  <version epoch="0" ver="0.185" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
</package>
<package pkgid="15828449a2c715dd88a6aedf0627e0614c5a85a2fa5cf947f84bb124ae89f9dc" name="elfutils-extra" arch="aarch64">
  <version epoch="0" ver="0.185" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.185-20" date="1739707200">- fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377</changelog>
</package>
<package pkgid="de57d5757648fc4ce0fd75d8a8737d4324c12af54d6229e6af06b5901cda0921" name="elfutils-help" arch="aarch64">
  <version epoch="0" ver="0.185" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
</package>
<package pkgid="650a6ad348c178142823476c179de9aa457a6aa970e5216c98d48ca484dc4b5c" name="elfutils-help" arch="aarch64">
  <version epoch="0" ver="0.185" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 0.185-18" date="1693569600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Use upstream patch for Fix error of parsing object file perms</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 0.185-19" date="1738756800">- correctly fix libdebuginfod.so requirement</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 0.185-20" date="1739707200">- fix CVE-2025-1352 CVE-2025-1372 CVE-2025-1376 CVE-2025-1377</changelog>
</package>
<package pkgid="34b1ee8872c851f1eb20ab67641ed7b2d47830b66e1ea4fa97cd89b155db3d41" name="emacs" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="b89ddd925a024263971f5e0b41d973242ef0cb3acbf890f7b15e685c96a7b989" name="emacs" arch="aarch64">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="2d1017d250f37a6eae6dcd60c7c165e3787e3dd6d2e3e57960f440b37ed434cd" name="emacs-common" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="7182746bb02c4e15b63a79a03513cc290514960d3ab811ec9202e2c70bc070e7" name="emacs-common" arch="aarch64">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="44013154bc83b9ed5e953f31c37891fabbec648258fdb73571dc8a88fbfa529d" name="emacs-debuginfo" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="e8c19123ffd3e12ad2f19514a29084fda99ec6d1f45975b017469d95628bc867" name="emacs-debuginfo" arch="aarch64">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="82e2084714b61de2f5086145ba42f09f3807db3aa04edc0c935fc945f7506312" name="emacs-debugsource" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="ddb8f0bc56ee92985a7d4537f7ce2a5ace4e373c32f29033e80f1eaae47bc830" name="emacs-debugsource" arch="aarch64">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="42e37728c9107c8d42dd89527a20c9362a4fd01f459d63cbe9fca509c1d4b1b2" name="emacs-devel" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="60c35f019d7f43a748d1da6d9dff92b11a852552d80b715b72c60f20f616523c" name="emacs-devel" arch="aarch64">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="9d7e91fc8dd1db3991139e0ce5bd1e3ac91f3e74473e3a513ba17b1dfc33a10f" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="06f21cee7c138011829a684bd43a92148e3f4dd1d460c24ca8948ef3f9628df9" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="cce957886ffd529801f004e3f03bcf67c22a98dcb0ade1d1078b30dfc1f7dc89" name="emacs-help" arch="noarch">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="739fb14690dc9a5a7920821c6de8ac7132d7e5a6123ee88bcbb8956ba10a0a81" name="emacs-help" arch="noarch">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="1df619e3995815b58eaed37c95f76f8b734d34204243a653b3d9f1ba7a27b3e4" name="emacs-lucid" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="26a4c8d2aca8a31b4e65223135ccfe6696a856bbfc03566a27a698f10ac62349" name="emacs-lucid" arch="aarch64">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="682450dae1012b8a269456291923fc314d231102c8787b815c2a9273892c784a" name="emacs-nox" arch="aarch64">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="081ec23e29ab075978150495f9c5e1aa99bef084463a8b66d8b297dfbc0cfd4d" name="emacs-nox" arch="aarch64">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="b5fe12b6c54f049ae893d4570002c2e3d62bfc2b9339b0e70517c29731781976" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="27.2" rel="14.oe2203sp4"/>
  <changelog author="zhujunhao &lt;zhujunhao11@huawei.com&gt; - 1:27.2-6" date="1661515200">- close bootstrap with product_family</changelog>
  <changelog author="Wenlong Zhang&lt;zhangwenlong@loongson.cn&gt; - 1:27.2-7" date="1668772800">- add loongarch support for emacs</changelog>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 1:27.2-8" date="1669896000">- fix CVE-2022-45939</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
</package>
<package pkgid="16cf28eb9af4a726c931c67c039b5292a4ff74bf40a693a8aab705277ae61b67" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="27.2" rel="15.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-9" date="1677153600">- fix CVE-2022-48337 CVE-2022-48338 CVE-2022-48339</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-10" date="1679659200">- fix CVE-2023-28617</changelog>
  <changelog author="leeffo &lt;liweiganga@uniontech.com&gt; - 1:27.2-11" date="1695643200">- fix CVE-2022-48337</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-12" date="1709208000">- fix emacs start slow</changelog>
  <changelog author="lingsheng &lt;lingsheng1@h-partners.com&gt; - 1:27.2-13" date="1711972800">- fix CVE-2024-30203 CVE-2024-30204 CVE-2024-30205</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-14" date="1719921600">- fix CVE-2024-39331</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 1:27.2-15" date="1739448000">- fix CVE-2025-1244</changelog>
</package>
<package pkgid="af19e37f647cd384e199f42f4d5e13efffe808e27a1155c751feac5db82635a5" name="enscript" arch="aarch64">
  <version epoch="0" ver="1.6.6" rel="22.oe2203sp4"/>
  <changelog author="lvzhonglin&lt;lvzhonglin@inspur.com&gt; - 1.6.6-21" date="1728475200">- update package description</changelog>
  <changelog author="pengjian &lt;pengjian23@mails.ucas.ac.cn&gt; - 1.6.6-22" date="1736856000">- fix CVE-2018-17942</changelog>
</package>
<package pkgid="4889453cb6c6c837f6ac7bea7b1833f01280624f89665da99f2e59c1f16555c4" name="enscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.6.6" rel="22.oe2203sp4"/>
  <changelog author="lvzhonglin&lt;lvzhonglin@inspur.com&gt; - 1.6.6-21" date="1728475200">- update package description</changelog>
  <changelog author="pengjian &lt;pengjian23@mails.ucas.ac.cn&gt; - 1.6.6-22" date="1736856000">- fix CVE-2018-17942</changelog>
</package>
<package pkgid="b6bfc88358a622ce014674d8dcdf9739ce2e8aea804598477e31027ea43d2610" name="enscript-debugsource" arch="aarch64">
  <version epoch="0" ver="1.6.6" rel="22.oe2203sp4"/>
  <changelog author="lvzhonglin&lt;lvzhonglin@inspur.com&gt; - 1.6.6-21" date="1728475200">- update package description</changelog>
  <changelog author="pengjian &lt;pengjian23@mails.ucas.ac.cn&gt; - 1.6.6-22" date="1736856000">- fix CVE-2018-17942</changelog>
</package>
<package pkgid="608bcad5d6076ca54df2378858aeab4a596fb630d5d0f2933dd62458ec1e9574" name="enscript-help" arch="aarch64">
  <version epoch="0" ver="1.6.6" rel="22.oe2203sp4"/>
  <changelog author="lvzhonglin&lt;lvzhonglin@inspur.com&gt; - 1.6.6-21" date="1728475200">- update package description</changelog>
  <changelog author="pengjian &lt;pengjian23@mails.ucas.ac.cn&gt; - 1.6.6-22" date="1736856000">- fix CVE-2018-17942</changelog>
</package>
<package pkgid="34f2a5db70dcc4f076730c8340ad5286a5c71833420d8602c07a87ef62544175" name="erlang" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="ccbd97578e6492fd0c25ee1897a90d6b8309f26577e0f6632f95fcbc8fa8c16f" name="erlang" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="dd734f5a993593d54ac3933507988a76ca21d07c19e4668f0f4a61fc0b57c1aa" name="erlang" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="c308262d97ef62aac31676ac121e589edf758431848b168b51816c5eef118e65" name="erlang-asn1" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="184ddc32033bb7d89e3c07648e1d5bd814becd682840ea8d8ffcf2eef2a6e341" name="erlang-asn1" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="a6d53e41a55d8ff8ef95dd90c3d6b9b6da2c98e11ca9a34fdab0c6edb56bc72c" name="erlang-asn1" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="4b08e724dd1aa005c181a3d4997af28d5dfd25c4055af1c91bde9e0303c220bd" name="erlang-common_test" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="074d997c48777d427dfb6cc64af95392fc77ab9663f9775032299786970cf03d" name="erlang-common_test" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="2eca43dfbcb3eac72b0cf7c016f1c78a7fe1172ad3e013a39159b58b4aea599d" name="erlang-common_test" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="d15f5aca2e8ec6e21fcf0574f94409d84de14840ef19e056347b00f96b2df09b" name="erlang-compiler" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="89036a9bf92700f11843404977cadaac530955e989925e158c55f133713bd115" name="erlang-compiler" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="6d1859924c0a10697e0f1f1e061d25cda9e3615b8d2ffe5d350c4164e72a58c8" name="erlang-compiler" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="2ac393d43aed3b66ac965d62a22b95f178e8169abe90d65c21e276e5929637cb" name="erlang-crypto" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="9162852babaf1e1c8a85ea815962cbd209cd37535a605a84cb2b84de5784775f" name="erlang-crypto" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="2cf89803b50138422bd160ebe4d7da4cdedf6fd70958a1ab7013af4e8df89169" name="erlang-crypto" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="9e41924a74125d1951af0c213197273fedcd9ac6ddc9c391b17063b3c45a03b9" name="erlang-debugger" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="14d3d1f8ec0b6f48323318ff63b5027f11b464d83ff477443f0978cfbb743dfd" name="erlang-debugger" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="e878d0ca5d8216ec50448d39dcc606ca33c54ebedecfcc91c9798ae88c845332" name="erlang-debugger" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="1d4299cd731a88f0ecdf7c42b2da21cc6165c64d9eaa5fdc928fb3510c4b94f7" name="erlang-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="961cd8f8d627cc7499eb22303b8380cb62c7b70e8926fde2452def406433bb7f" name="erlang-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="ca48b8bfe7ca48262ba5152bc3073587f84157c4f2af945aff1b55ab145f7b5f" name="erlang-debuginfo" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="80c30f0c8a1569edc0ff1d446cb5b5c8470168dd15e08ae9793f30dad5e73be5" name="erlang-debugsource" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="191457106a0b064cc87ef25f721ac3d15d9e4471e9ef7cbab53398d7b200b38a" name="erlang-debugsource" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="5217717074f216ea2944883da9db4118ae943221150da3f05bd00923c0dcf71e" name="erlang-debugsource" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="00d2c09bf0e3f6ea2da22258de7cf256199797a64fc5a3452387083ea8e60c31" name="erlang-dialyzer" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="e95c050233036bac0ece6ede471fbb2b1f33cfc3ccb87f0ddcda31eb2bceb413" name="erlang-dialyzer" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="f35b13b723eefe8000a5deaada8601ba378fb8ffcb1269f0e1b03f0ae941fec6" name="erlang-dialyzer" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="0c99f7b540ecef31de3a15012328fd70d05392335c21fc03f6210e7e4fbe2a06" name="erlang-diameter" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="86fc5ae7cc08d28e6a102494b6a20925726bd7166702f62ffe599d8ae7627531" name="erlang-diameter" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="3afac0e0c6b03bd7ced4850ef03c51906b737d83fd6943fc66022ea00cf08c22" name="erlang-diameter" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="8e4d5950a59f10cd0e69ed9765dfc9ecb1c6b408ee5d79fc16ca77fae16642fa" name="erlang-edoc" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="f21daed2460bc6c06baf767ed43fc562254df0d84f9cdaba7153f99c90b29d68" name="erlang-edoc" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="5383eba5165b28dfd2d5a97f54ab2feb3f09e5bb7b7e7fd8761c8e757e804e08" name="erlang-edoc" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="0965cff4d7ecd4e490fb46bfb1d44229402f28dc25ab4e3fabb2824028770c81" name="erlang-eldap" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="cf552d510eac8bfd6b42858912c9a886e4b0341c3629ee7e043b6c1992288adb" name="erlang-eldap" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="419935abcb63e4f7200951f5db8e90f1a6f32645cc3e5af1a95c2431c57b5800" name="erlang-eldap" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="59a9330c9b88473fe3cb2636b871db9edacdd4029b67b482c64c326a7c8bb5d2" name="erlang-erl_docgen" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="80340c1654b38f6d8b39cf0b0101b7aef79b3fdd3acfcad2ca335ce889a537ca" name="erlang-erl_docgen" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="d06edfa711bb97d7a3bddfb49ad914ede955c39073ba6b1749ce5d76c1925b51" name="erlang-erl_docgen" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="eb36df79fe78d38204ae3dc82ed7bb078457ec93be1d12added87a1a0ebcdbb0" name="erlang-erl_interface" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="bda1f1183b765afed734891bd33e02829329f1a8c631576818647f8159113bae" name="erlang-erl_interface" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="57dce407f758f9a02afb42b2f85b088a1d324abf0835d33829e59ab48efca597" name="erlang-erl_interface" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="84d22886e3cdfa009fb1363f7b0ca97edf01f53893f8ad99e02e0d8dc9bc808b" name="erlang-erts" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="21d13be3f27ee12b5cc9047134454fdcc2f3d860585bd293396c312a76c5e480" name="erlang-erts" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="319c03d7b4c484172b433b7380beddbef79786eb24cf1f72322cfafb44a78011" name="erlang-erts" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="79132c994b6428b81e9987bcab007d447a123ce9eae61682a57c37ed993dbb7f" name="erlang-et" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="66ffca3e15e90d9eb46370581044f126b61be7a2f6b0b4ecef3f1d332bcf3e60" name="erlang-et" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="5549fe82962b5f9df38e4d6f1c7fd5c03ba03b38918c6fb42095e5cc17ebb7e2" name="erlang-et" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="dccfd7e5467ab8a1cf9f13d0123058e7e38dc4858856c1d0f3b958922e52c6dc" name="erlang-eunit" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="f9769aecdb4dd43c1a13deb04c622072cf448d2eddda611a4acac4d81e704e92" name="erlang-eunit" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="2c7a4880e79c331e13b17521a5e2c2737efbd3595cfffa387c53b84e8d15589a" name="erlang-eunit" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="ed6b4724e16582784824596654e11b19b0b4620768de2e3dc84e786716f5c928" name="erlang-examples" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="077efcd5de55d5b617e84d65cfe1426be2da27d8a133d84e88913b95c25d00cd" name="erlang-examples" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="2bb883c408d90041739bf256900fc19a1be9f9d9395a8d11e5103bc94bd72186" name="erlang-examples" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="787728a424efdaa9c427a517dd1250eaa772c47786735585017c9d8b9a909437" name="erlang-ftp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="8cb8868948d9d1ab9794f6f0a835570a07d1fc5868ddbc9be82fe205b6bc81a2" name="erlang-ftp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="b13676f1a17a74d1425a56325a6dbe595bf5d2bd5a07f4cbe73e701b4a6eb0e2" name="erlang-ftp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="59abd524b4df43ee397ca78a8a7acac7505d1209baeb42ce3950487570ed800b" name="erlang-hipe" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="25c107b84a3f00eb276c8cfd1e6ce9eb8a1e143de55a930eb3d600da021717d6" name="erlang-hipe" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="995d57df3972c82c43a4a6da5fd9c3bebcd68fba5eabd68a9cf9146ef10ba051" name="erlang-hipe" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="bdb51de74e5b7304f42058b5d148cdf7e0d40151af35eba2bce7bcdc6002086c" name="erlang-inets" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="eacc981cba960c5c17baed8c92e2120727c70ade4a0f4833258cffc9647b8561" name="erlang-inets" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="f7525aade0610bf36f31d25ffafd48d6b5111d90a29024d324f850ab4383e8d8" name="erlang-inets" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="9c8a74d7854b3064b77792d505980f4fd5462354ded005cecd2f72f021ebf02d" name="erlang-jinterface" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="b62c783f82d7f57a259480450d89eceb484435493d26cc3b33c0a1266f57d566" name="erlang-jinterface" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="4b5c3a3e59b1d63142fa749610ae031f297ce5ac33d8cd8e01a724d6e4bec5f3" name="erlang-jinterface" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="32986481ecf4449df49739a624d36a78d023fc0391837394f64d0631e5f5ed7e" name="erlang-kernel" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="e03a1227c429181b28afbeee823aac1a2d40102d2377641863bf04280b72de9e" name="erlang-kernel" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="5e0fbbc6298eab3b06587cf5d0ada975b9fc16dd6a9da01c51bd0c03e372d224" name="erlang-kernel" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="d37d0c52a179ad7f583e9ecdfe4c0351e3f6baa66e726458a4337da2d63e518f" name="erlang-megaco" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="527ce6caefe85769849a6ef15dcd20968afb798e9c19a050296cc71dc791c222" name="erlang-megaco" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="62ebfd1a21d1abcee87fcbd1a65dfda5122e90e83e91bcbbb67571ba1d9bccb9" name="erlang-megaco" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="d7355b90afd3a52b8793213c8b973513c5e2ba920b7441edbb88c0acb26551e4" name="erlang-mnesia" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="dbee56395a1d6d229e204a6d909b75ec3f59f7bf42a9dcbabcce75dd57188bef" name="erlang-mnesia" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="31f19d6a86fd304d5a09dc70289f05964425335f3b7315c10ec02209eb89095a" name="erlang-mnesia" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="6dccf7e8c5c9dcaa0174cc88c97bbe5ed88d6437c4f32eba43c9fb073abd143f" name="erlang-observer" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="f04dc12967cd97ef1fcd90e1320424b9fafe05e94995b4fce6ba6a6055962fa5" name="erlang-observer" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="3e6425f9c6e55478b7b0dc960f7eaca3be1be8228d6c8754fce19d4e66a254fe" name="erlang-observer" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="e755ac5582a66c6412256d063aa9de818dec448ec5b50102bdde1ad7059f3da2" name="erlang-odbc" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="35bf9d41aa3a420ed02948eeb324dc10d5c5a4996a654fe0fe5fbe76d77bde84" name="erlang-odbc" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="870e4ae31930903d71e1c94d4dc61d044fdeb1af4a95590a2b11a900c29cd90e" name="erlang-odbc" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="5c250536aa5a84cb951174c820cebd66a682679ac1f1440c9092f91ef56680bd" name="erlang-os_mon" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="2aab5aabcd127aa51e5c92ff23d3f862722ab7c7d52f5916585aea31a6fe38c4" name="erlang-os_mon" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="e8fa0ae53caf2a8c8186dacecff8691172faba518fabed8deb2632bc64962e7d" name="erlang-os_mon" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="03589ff157ad3f160c4a6f7677f5537d8e8710cc65c392d13c176678c63568ca" name="erlang-parsetools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="c3cc097459f96d0f4133a93590a9e73763223305421448fefecbe15bfec90b6b" name="erlang-parsetools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="09fa53b48a7f83038cc0dc50f7fac4e88ded4e7abd57680b6dd98dc2eee55b4e" name="erlang-parsetools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="c6e6825939e693f33005d67ae28d66d075ccd6a997add7c5c9ec6ff5ae15ace3" name="erlang-public_key" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="51afebd79947fbd0af9dcc3e9a1448a5c39a7032b216fa0800dd1f585e64b6e6" name="erlang-public_key" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="8b2111f44342a08cf04349a443c1ebd42c5075d7db21551169939433bf170cf5" name="erlang-public_key" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="6c7a238104315f0c30970348df4faf1f9eb4908f676db739e22ff52f5664d4c7" name="erlang-reltool" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="0cf797166c133a71c04dba4dd6919f8e2198876441c27b798ab3898a4222797c" name="erlang-reltool" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="8a3b1d36bea54afcf0b35ac094694ab20bc6b5c5a70a9931b5e5a72af21f4f89" name="erlang-reltool" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="a6bce8d1ada46e8b2baf1b23ff28a8dd50b6d3e6cc9988fabcf0035abcdb98ee" name="erlang-runtime_tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="7bc4e052f882082d6f4605e19d8a22f80e40f5683ebfdd035daea02b6e824e20" name="erlang-runtime_tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="38f5f77f230ed5b3ddec138df575301a36277ce1671badb4f5ab8323f5cae9fd" name="erlang-runtime_tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="33af3d2f177cc102fbb249e2eeff068091f971080e8fff4ffc1f0df9184515e1" name="erlang-sasl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="00f44dc0203b3401be7f5d85091fc9503bf11d9ec9c6e295512e1d1abe89bfd0" name="erlang-sasl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="41500e63b2f1aa179aa0996d328ccac73a72b6509c0a074c501f973d2fb37ffc" name="erlang-sasl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="27bd04f7841daa88dfc6a3fbaee3bf90184baad0d42462ca6f55aad19b8f945b" name="erlang-snmp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="4a053d77abc087300b93360c427cc8b26971eff3bf65b07e115c3fa8b9f89bc2" name="erlang-snmp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="da906c89e517a78dd0692373961e79baf69bda9ca07fccec1454248ffe3397df" name="erlang-snmp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="89bb32c60ed3d30f9a7bb15be6b4badd1a6897e011827b371853bf2fd33f6a6b" name="erlang-ssh" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="778d46e7ea41c811a8102fb7ce7fe11210470e96ca768bec04003fa17193287e" name="erlang-ssh" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="2b5b4451075a2ad5c7c08a0c82b6c0408765e98fd5b8a0b51efd0a64a13a05b6" name="erlang-ssh" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="8743defc6218959f1437f9b36f421970aea8559169e4eaf31c1683ff4aa1d063" name="erlang-ssl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="bc52ba3e6d92f6a05b30f0ffd60a4958e5debd721ccba2fbfa16b8bc2fde33ba" name="erlang-ssl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="5b3a458c630271a5e9fb6134f7d0520137bfc7780dd6a8100ce1e9fa0d7867f9" name="erlang-ssl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="6dfcb454d3b17ad95fe36df23ffb34264e316abdfaafef714bd30d808ca07a57" name="erlang-stdlib" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="a4f6fccc2394cf686b41f42a473be8dd28b7d9fb744a9be5c7128eea5ba4f46e" name="erlang-stdlib" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="b382661d3645050ff9fea57b399b91f91aee4aaf89689d0171829bd643895ce4" name="erlang-stdlib" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="924980027d46c7196b65f6609190623198a5e59b4cb2ef8edd9128842acfd8db" name="erlang-syntax_tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="e49f96dd60919bdbcead0c9ddd69fde1801579772cf94a802c7b9efa6c58f0d3" name="erlang-syntax_tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="be8b6fc7b7b613dc32784571da4692c5b4e4d736d9c51b4dfdef73536b735887" name="erlang-syntax_tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="0509fd2e864b91c91af79a8aa06f79b83bd90d3a3489ea8580a85e3e46a78dc9" name="erlang-tftp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="aa756268fd867c0a1503e5d6509c10b0c336deb47bd2db88df72649025621f85" name="erlang-tftp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="494a6de5d438fde4f382856cbab46bb65b70becf4f8b588f9ab275c38ede95f1" name="erlang-tftp" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="64ddc8f81e3fa4039d19614cd8275aa4594238393eae6ba4549d3f8b76118034" name="erlang-tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="b2c4d45ef99323fdfbe8e7dbdb23ab47216e443f13ae258fee4bf890374dcaca" name="erlang-tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="3f41b3111e835735107d98117c91db88b10c966c2b609628b97692e1335622b5" name="erlang-tools" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="a215ab976996be0b7224fb0e4c9b7e14ae81262273b0520791bfa96d64f46e5d" name="erlang-wx" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="de31e7635c155c894dfe4e6de29dd0b5138a1889c1dddfb4aa3a241a7f33d995" name="erlang-wx" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="c8f7a00c480a91143dd2e3eec09b7bc02043ecdb9ecff1738b8a9f82c596b1ed" name="erlang-wx" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="60c40228e7eb176e2d993d74b5c0c410726df2bae42724d32d8f0e59b7d6bcc4" name="erlang-xmerl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="5.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
</package>
<package pkgid="c53440b07645d1e775c35086757da9339c2864939c042411aba5e6dcdc6706ed" name="erlang-xmerl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="6.oe2203sp4"/>
  <changelog author="Wenlong Zhang &lt;zhangwenlong@loongson.cn&gt; - 23.3.4.9-2" date="1683547200">- fix build error for loongarch64</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
</package>
<package pkgid="3b82c18594c524531dd077d5014f6016d34bc691783ea9d6d51204bca1d1a378" name="erlang-xmerl" arch="aarch64">
  <version epoch="0" ver="23.3.4.9" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-3" date="1702468800">- Fix CVE-2022-37026</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-4" date="1706184000">- Fix CVE-2023-48795</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 23.3.4.9-5" date="1740398400">- Fix CVE-2025-26618</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 23.3.4.9-6" date="1745668800">- fix CVE-2025-30211, CVE-2025-32433</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 23.3.4.9-7" date="1750248000">- Fix CVE-2025-4748</changelog>
</package>
<package pkgid="f9b0a302e35b7c5dd58d368ec1efc22b6917ec107539e8768bfe08b1f286bdad" name="etcd" arch="aarch64">
  <version epoch="0" ver="3.4.14" rel="11.oe2203sp4"/>
  <changelog author="guojunding &lt;guojunding@kylinos.cn&gt; - 3.4.14-6" date="1721217600">- Suppress noisy basic auth token deletion log</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-7" date="1739275200">- Type:CVE
- CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
- SUG:NA
- DESC: Batch fix cve through rebuild and sync release</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-8" date="1739448000">- Type:CVE
- CVE:CVE-2022-3064
- SUG:NA
- DESC: backport fix CVE-2022-3064</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-9" date="1739534400">- Type:CVE
- CVE:CVE-2022-41723
- SUG:NA
- DESC: backport fix CVE-2022-41723</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-10" date="1739793600">- Type:CVE
- CVE:CVE-2022-34038
- SUG:NA
- DESC: backport fix CVE-2022-34038</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-11" date="1739793601">- Type:CVE
- CVE:CVE-2023-32082 CVE-2021-28235
- SUG:NA
- DESC: backport fix CVE-2023-32082 and CVE-2021-28235</changelog>
</package>
<package pkgid="03fadcdd0b8b829ed806c00c52ec8a11a78a94ed143411eff2a637ed2f495a16" name="etcd" arch="aarch64">
  <version epoch="0" ver="3.4.14" rel="12.oe2203sp4"/>
  <changelog author="guojunding &lt;guojunding@kylinos.cn&gt; - 3.4.14-6" date="1721217600">- Suppress noisy basic auth token deletion log</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-7" date="1739275200">- Type:CVE
- CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
- SUG:NA
- DESC: Batch fix cve through rebuild and sync release</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-8" date="1739448000">- Type:CVE
- CVE:CVE-2022-3064
- SUG:NA
- DESC: backport fix CVE-2022-3064</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-9" date="1739534400">- Type:CVE
- CVE:CVE-2022-41723
- SUG:NA
- DESC: backport fix CVE-2022-41723</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-10" date="1739793600">- Type:CVE
- CVE:CVE-2022-34038
- SUG:NA
- DESC: backport fix CVE-2022-34038</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-11" date="1739793601">- Type:CVE
- CVE:CVE-2023-32082 CVE-2021-28235
- SUG:NA
- DESC: backport fix CVE-2023-32082 and CVE-2021-28235</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-12" date="1739880000">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC: backport fix CVE-2023-39325</changelog>
</package>
<package pkgid="5e1e377a46c79b27faf46acf662ddbb628abe225cd740b9a3924f671b92df361" name="etcd" arch="aarch64">
  <version epoch="0" ver="3.4.14" rel="13.oe2203sp4"/>
  <changelog author="guojunding &lt;guojunding@kylinos.cn&gt; - 3.4.14-6" date="1721217600">- Suppress noisy basic auth token deletion log</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-7" date="1739275200">- Type:CVE
- CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
- SUG:NA
- DESC: Batch fix cve through rebuild and sync release</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-8" date="1739448000">- Type:CVE
- CVE:CVE-2022-3064
- SUG:NA
- DESC: backport fix CVE-2022-3064</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-9" date="1739534400">- Type:CVE
- CVE:CVE-2022-41723
- SUG:NA
- DESC: backport fix CVE-2022-41723</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-10" date="1739793600">- Type:CVE
- CVE:CVE-2022-34038
- SUG:NA
- DESC: backport fix CVE-2022-34038</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-11" date="1739793601">- Type:CVE
- CVE:CVE-2023-32082 CVE-2021-28235
- SUG:NA
- DESC: backport fix CVE-2023-32082 and CVE-2021-28235</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-12" date="1739880000">- Type:CVE
- CVE:CVE-2023-39325
- SUG:NA
- DESC: backport fix CVE-2023-39325</changelog>
  <changelog author="wubijie &lt;wubijie@kylinos.cn&gt; - 3.4.14-13" date="1751544000">- Type:CVE
- ID:CVE-2025-4673
- SUG:NA
- DESC:batch fix cve through rebuild</changelog>
</package>
<package pkgid="f53581c6292dc1a72a892e0606c6a73da0cfb06ed91d3cc7648d85f6d9a17bda" name="etcd" arch="aarch64">
  <version epoch="0" ver="3.4.14" rel="6.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 3.4.14-5" date="1666180800">- add sw64 patch</changelog>
  <changelog author="guojunding &lt;guojunding@kylinos.cn&gt; - 3.4.14-6" date="1721217600">- Suppress noisy basic auth token deletion log</changelog>
</package>
<package pkgid="de2358e2b1322eaab865350938bcccb56d6f537b7b5a419dab167331d571077f" name="etcd" arch="aarch64">
  <version epoch="0" ver="3.4.14" rel="7.oe2203sp4"/>
  <changelog author="guojunding &lt;guojunding@kylinos.cn&gt; - 3.4.14-6" date="1721217600">- Suppress noisy basic auth token deletion log</changelog>
  <changelog author="lvxiangcong&lt;lvxiangcong@kylinos.cn&gt; - 3.4.14-7" date="1739275200">- Type:CVE
- CVE:CVE-2022-24675 CVE-2022-28327 CVE-2022-24921 CVE-2021-44717 CVE-2021-33195
- SUG:NA
- DESC: Batch fix cve through rebuild and sync release</changelog>
</package>
<package pkgid="6f9af2ab7e669ed470670d73e41e641c302453342cba0c9292c016344a56b971" name="expat" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="e4014303c713b1c27c792994c05dc9fd30b804624176a6b3bdd7b3074422a4e1" name="expat" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="256e3e368fcd88475e67ae728a5a59f09b4db56c424d2746c653355b28fad185" name="expat" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="14.oe2203sp4"/>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4.1-14" date="1730203200">- fix CVE-2024-50602</changelog>
</package>
<package pkgid="b5918f53b12a4c23be7bb97016d6e8c990dfa6969415f8e1d99fad9858734c65" name="expat-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="21dbc1b23d8d288a1e8dd19743f289ac0ca2801549bfa73083ee50eaa787c287" name="expat-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="8e2757688b6f3e1f722aaa95c3f2ea8622058c8724fbc60901424d598a6c355f" name="expat-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="14.oe2203sp4"/>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4.1-14" date="1730203200">- fix CVE-2024-50602</changelog>
</package>
<package pkgid="955830e0ecd551657d5fb0dbc91ceeddc1994cb188011b99a0c5733a01ceba64" name="expat-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="41eb5fb6c3da491a081ecaf94718eaf4085aaa4e3afa225f2fc961ad01ad3a9d" name="expat-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="cc78fbffcc650921d738ef8db23a339bdddc98d5ec62bbf6276d109b2d2c801a" name="expat-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="14.oe2203sp4"/>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4.1-14" date="1730203200">- fix CVE-2024-50602</changelog>
</package>
<package pkgid="2149e18c07b6e207097d70a8659a84efe1f925d62aee0b998292fd98f97e4098" name="expat-devel" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="2444c216396c535695541ee06fe7f313885c7ac4c9ccb4b850daf57fb23ad051" name="expat-devel" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="1efaa5d404d3b08062d2d2d8e07eb929677de38d189f022f102fd74d04258e8c" name="expat-devel" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="14.oe2203sp4"/>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4.1-14" date="1730203200">- fix CVE-2024-50602</changelog>
</package>
<package pkgid="5efdd68e4604877eca88cf591cbe8f4f256d634daaf3ecc624cd4a2f9b262f76" name="expat-help" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="12.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
</package>
<package pkgid="1b7567fa877102f5a0bfdb0983bea5e403a2b08d2e389fb29094ae069b8c89d4" name="expat-help" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="13.oe2203sp4"/>
  <changelog author="panxiaohe &lt;panxh.life@foxmail.com&gt; - 2.4.1-6" date="1663243200">- fix CVE-2022-40674</changelog>
  <changelog author="huangduirong &lt;huangduirong@huawei.com&gt; - 2.4.1-7" date="1665489600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Move autoreconf to build</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.4.1-8" date="1667044800">- fix CVE-2022-43680</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
</package>
<package pkgid="eaa022328e73e517d4caeadf830db98822abe32547c42cafcbf4d961ab56cae8" name="expat-help" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="14.oe2203sp4"/>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-9" date="1711368000">- fix CVE-2024-28757</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-10" date="1711368001">- fix CVE-2023-52426</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-11" date="1712836800">- fix CVE-2023-52425</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 2.4.1-12" date="1725364800">- fix CVE-2024-45490</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.4.1-13" date="1725451200">- fix CVE-2024-45491, CVE-2024-45492</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4.1-14" date="1730203200">- fix CVE-2024-50602</changelog>
</package>
<package pkgid="c98712a28820dd217112199cf09f253721183ab493b760866987b91e04a46195" name="fcgi" arch="aarch64">
  <version epoch="0" ver="2.4.2" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.4.2-2" date="1745755200">- Fix CVE-2025-23016</changelog>
</package>
<package pkgid="8755a75ed1e7a3fdd6386cd7e4f1785fb8c65ec8e7aa0e804fe4f5516e81d499" name="fcgi-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.2" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.4.2-2" date="1745755200">- Fix CVE-2025-23016</changelog>
</package>
<package pkgid="8246063427a568ced09b05e4103fbe75da3e96aea980d8dfc91bc3e2636f949a" name="fcgi-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.2" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.4.2-2" date="1745755200">- Fix CVE-2025-23016</changelog>
</package>
<package pkgid="48300d70f4118ae1f75f9decf6ada5e71dc13cec583a3f99d07ec849dd4038d0" name="fcgi-devel" arch="aarch64">
  <version epoch="0" ver="2.4.2" rel="2.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.4.2-2" date="1745755200">- Fix CVE-2025-23016</changelog>
</package>
<package pkgid="88971d0bad8c00c97f14888d1ae9db3b4f1994952214dbc1dc0abd383d39127f" name="fence-agents-all" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="55208b92bbbb3514d4a7b2baf93ca76a2acc3b4770393c173ed74478dec61853" name="fence-agents-amt-ws" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="33ac084acb3b7b1118768be04fd8c0f1382d5f05995bc71b3f3ade3ed9c077e6" name="fence-agents-apc" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="63d87167497204819ebe847988a7dd7332e96988ac9afdead2cd9e706d584efe" name="fence-agents-apc-snmp" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="275653967d2c7cedabb94208888b8850595c06b9834e1b82a983e7ff14ec2481" name="fence-agents-bladecenter" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="9744c292419dfbbf9b4c8f93f3cbc68a4ff5f9986c7a46be6b81e8907c8d894b" name="fence-agents-brocade" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="6f0cb0b95a510a01307bd1b58990828df0491162e1bf2149422990cdcc2b26a4" name="fence-agents-cisco-mds" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="25262e4b78f859bdff1a3ac39d55d5f15f773b8aba203db7bf370f8eb71de741" name="fence-agents-cisco-ucs" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="92a1bb9852dc19941b20a37d232b5ad69318bf0b322bc10f8e416edfa8e70016" name="fence-agents-common" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="b86452711ad6deb46ff24d2b1c42222ece7c3c52eaf56cc30e375bc255d42a07" name="fence-agents-compute" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="8c4d158395596f1be4ea68d71303dbb3ecef47da4c4810d1ebddd3584075beda" name="fence-agents-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="37e92623d53191fd345a25882d4afacad53098a982afc46a2885c89523e7d564" name="fence-agents-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="aed6e8c8044ede1a361aa6013e1ea129f35124682935df7f69886550626c40b5" name="fence-agents-drac5" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="5376ae666e26998aa0f4fb50c36ad60ed7bd90eb29830617cc3377e79e5141f0" name="fence-agents-eaton-snmp" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="35eda1c0a45c5674b77cf40e5f5af562bf2d42760c7c86f4abfc281ace17c1b1" name="fence-agents-emerson" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="f8ad36306046dc80c1141444f3951b9ea8a7e9d31e6c32af0978e94ec43bb8b5" name="fence-agents-eps" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="7edd065b09d997305a82339b841726350a4f6bd3b068625cbfee8deb8d12ee9a" name="fence-agents-heuristics-ping" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="655049325180361912e1cf6fd5e0ac364f4d49c7477a2489ec565b2ac8dd759c" name="fence-agents-hpblade" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="3f91757f0449c4750366fff0a6235e387183360e2a3069ba59a5af8fb5334eb9" name="fence-agents-ibmblade" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="7d7516ae2ae28f842aaee3656565e972bc0314800ce589e1fdfb4854b4a8c8e5" name="fence-agents-ifmib" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="494f181eb652ef023632ab3a86b2d5e8a5ad4b9ee04c6d9581b5d07f80fe7dd9" name="fence-agents-ilo-moonshot" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="b7411e574bdf2ed003831fdec61c8d010edc0e852c611bdbc468369d29d835d0" name="fence-agents-ilo-mp" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="3bca10fe69c16c468c51ad5c13b023e03a3ebf41b4999e08e58b2e14f0cecccb" name="fence-agents-ilo-ssh" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="1113815dcbe48ee0fa7c56ac0f27bbb1fccce162c149562df610cef223fb29f2" name="fence-agents-ilo2" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="0496645ca64037a33ee63cdb369e283d3af6ac63563ae520982c63e2b1f30879" name="fence-agents-intelmodular" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="13691d1accc369aaa4368f4c99a62e8175f9acdfd77ee2e27909637e16a981e7" name="fence-agents-ipdu" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="c040125efd98d07c19aa48f4cfc2e47cb122d2298fefdb3ec64bc310f04102c6" name="fence-agents-ipmilan" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="118072a4f42404f2e1924aa6b525eb96cd46fc7d89c1b46c96df69d6a4fea9c2" name="fence-agents-kdump" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="fbe6d158b93b78aa5bba41859ad5269cb2c8ac9bcebfd98d9625c6abe3b07445" name="fence-agents-mpath" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="ff3bc9cfdaba7e45da3ae1ca63058b241b16cc3c533d54815dfb463093a876b3" name="fence-agents-redfish" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="9988c31a052f739d9c7a96c33e72351b7729488cd1cb0275c3322b9fda95eea6" name="fence-agents-rhevm" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="b7c888a0632f67f47d4c9ead0f9e5935520728fcf989162a8b2f233a39b3bde5" name="fence-agents-rsa" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="8b4e48a5414cdfedb0c0cd6ef855f52e5753927752d05b534942bdb11fafb238" name="fence-agents-rsb" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="f02cd5ac1ceac2a78e718e69c9347b0093dcb5109718ce9b968d7248f98e50f3" name="fence-agents-sbd" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="3c64207d73470ccb9278eb3c843770a8f7d43c414ddf4243821ec5229e56a24e" name="fence-agents-scsi" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="c7b4a9207110e1523bcfb79d376791a4fc4f83357561b71cb8baa3ff831aa760" name="fence-agents-virsh" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="713679f2e88e47e2555457fe147b5e12909cca51c82b8bc2a9da5e61d8dcfb84" name="fence-agents-vmware-rest" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="d25ce999404ab8cfaa145d4a5dc492268a7f06d2bf93b550ab005f7e1a898f76" name="fence-agents-vmware-soap" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="92d17cc6b36878eeadf7a53bb9506cb614fc844da05c857dfd199308c2df2d8b" name="fence-agents-wti" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="36.oe2203sp4"/>
  <changelog author="yangzhao_kl &lt;yangzhao1@kylinos.cn&gt; - 4.2.1-35" date="1674043200">- update require to python3-suds2</changelog>
  <changelog author="bizhiyuan &lt;bizhiyuan@kylinos.cn&gt; - 4.2.1-36" date="1725969600">- update python-pycryptodome source for CVE-2023-52323</changelog>
</package>
<package pkgid="e8916cbe3b0b7bfb320a6b5d540b8de747c796399073530c2e45df1efec10cd7" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="13.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
</package>
<package pkgid="c8349858b78564c30b61af1f0e62cbd2d586fba213c75a42c5cafdfcd00c5ee9" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="5060a782b5e7a370568821e016600d444eaad4135547608dc1c8e99d0d63339f" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="b53a7f8eea91bd4d8fc347b58f6ad86ce245d3cfc72e8f33148678d8395ae1cf" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="edf996fb388cbecc88644545fe96ef382becc5dcb1acf11bc9eba66142d4b7b6" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="19.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
</package>
<package pkgid="c07407ce800535f1b825bab4c32fb64594dab69e5ccb0f7a13a6e3caabf7aadc" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="20.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921600">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921601">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
</package>
<package pkgid="5ec5bdb94acfbc74c3a5107547e576cf371f16e14bdec445332d1cbc030d16c5" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="21.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921600">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
</package>
<package pkgid="b06de88a87cd42496af14b75cd7e6ba105c8a6337577333030f8946f554afed5" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="24.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612800">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.4-22" date="1736078400">- Type: CVE
- CVE: CVE-2024-36613
- SUG: NA
- DESC: fix CVE-2024-36613</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-23" date="1751630400">- Fix CVE-2020-22026/CVE-2020-22019/CVE-2020-22021/CVE-2020-22038/CVE-2020-22039/CVE-2020-22044/CVE-2020-22043</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-24" date="1751976000">- Fix CVE-2021-38090/CVE-2020-21697/CVE-2020-22042/CVE-2020-21688/CVE-2020-22037/CVE-2020-22051/CVE-2020-22020/CVE-2025-22921/CVE-2025-22919</changelog>
</package>
<package pkgid="e832f2e20180627a79784c35125c94276edc9dc7f28b76ab69ee9841c5accf47" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="13.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
</package>
<package pkgid="69f3be802f44e784262d74ecb6906aa883075c9b853f548da8650a0b086aa3be" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="6b5e5f5e0592c2a59a0ac82dd5c005b8ad4833e1e4ca867d1ef81e47fa7833f0" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="47f7cc7dd467ffc066204014cb18e0f9f55b02661f36e49acc52d9c792c724a4" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="6fa27f9967d99ef289f7a2830113357172f3449070d5732ee5914b850ef043e2" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="19.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
</package>
<package pkgid="15c156e00e255176430418b6526e5070b20ba2e9ad744d3f63b5e32c6ff79856" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="20.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921600">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921601">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
</package>
<package pkgid="199081f4980ea21242eee870162cbd5d3ee7334eb36e50d8ae57750d0d1dbca0" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="21.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921600">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
</package>
<package pkgid="64308779aa8d1d9a42cc121328f9ecfcde5a133c880aa74c2789682948d2e2b9" name="ffmpeg-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="24.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612800">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.4-22" date="1736078400">- Type: CVE
- CVE: CVE-2024-36613
- SUG: NA
- DESC: fix CVE-2024-36613</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-23" date="1751630400">- Fix CVE-2020-22026/CVE-2020-22019/CVE-2020-22021/CVE-2020-22038/CVE-2020-22039/CVE-2020-22044/CVE-2020-22043</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-24" date="1751976000">- Fix CVE-2021-38090/CVE-2020-21697/CVE-2020-22042/CVE-2020-21688/CVE-2020-22037/CVE-2020-22051/CVE-2020-22020/CVE-2025-22921/CVE-2025-22919</changelog>
</package>
<package pkgid="60cb06d0c757c017d9c41a809369e70c60d45d5372eeb1c4627079479c141ca7" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="13.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
</package>
<package pkgid="b42d0b9ffc3c758987cade2ae19c39a8ec0e2c40bf0abc8e278f3c56d231a006" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="c9fd7feef21bf58c2c5fcb6a96e5d404f1765200045c57dd20865e07531175ca" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="d63bdd70977d218a68f5d47fd93c89bf516bd7b5d2f072410e141d8996726fb1" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="8822d8ae8fc510808a9e74cb72c2069e76cae096c07e449636c2b382879089cd" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="19.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
</package>
<package pkgid="c1e975950a41bb875954d286f502f48fc2837d35063c1fc4a82969f6072eb034" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="20.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921600">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921601">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
</package>
<package pkgid="c3c053ee82ad3ac97d91d5029df161c52d6f67e81a9435aeb9fa3bf93752ee40" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="21.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921600">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
</package>
<package pkgid="f97ed89f3f5900f8ecd7e15a09f2de658d51cbfe84e75cf2bfb6e5f8cb539374" name="ffmpeg-debugsource" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="24.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612800">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.4-22" date="1736078400">- Type: CVE
- CVE: CVE-2024-36613
- SUG: NA
- DESC: fix CVE-2024-36613</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-23" date="1751630400">- Fix CVE-2020-22026/CVE-2020-22019/CVE-2020-22021/CVE-2020-22038/CVE-2020-22039/CVE-2020-22044/CVE-2020-22043</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-24" date="1751976000">- Fix CVE-2021-38090/CVE-2020-21697/CVE-2020-22042/CVE-2020-21688/CVE-2020-22037/CVE-2020-22051/CVE-2020-22020/CVE-2025-22921/CVE-2025-22919</changelog>
</package>
<package pkgid="6068ee5c5cd08d2165091d3c5f972b3bf1a7fc9f9aaa6637a35f4ad18bb3f9ed" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="13.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
</package>
<package pkgid="fa5e3e158c7635c17011fe0ef78a03dff19f76cc01aa6d77861a8e913d612195" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="ffd846a98398a58fdbed4ede00f511aba882abbe7de16c23679cc3214dd81459" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="9df869fdd64148a6422cac1db3a023d5042f364680ada4c45d709b8557602302" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="9aba467fa060537efd9cb4d2ace4fc0954e94d51683b358578ac5415c6f87f91" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="19.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
</package>
<package pkgid="34e6ae424325a0d459343f0efff7a8a6183ff977aaeb8257565dca7437c1e97c" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="20.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921600">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921601">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
</package>
<package pkgid="2fa504010f735570acb38257bca105854dafecb1f7010a602b94aa8ecbe77093" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="21.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921600">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
</package>
<package pkgid="6ec751f2ee1b1b666152adb698c337614966dad7c515cc42c72083f9c668955f" name="ffmpeg-devel" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="24.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612800">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.4-22" date="1736078400">- Type: CVE
- CVE: CVE-2024-36613
- SUG: NA
- DESC: fix CVE-2024-36613</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-23" date="1751630400">- Fix CVE-2020-22026/CVE-2020-22019/CVE-2020-22021/CVE-2020-22038/CVE-2020-22039/CVE-2020-22044/CVE-2020-22043</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-24" date="1751976000">- Fix CVE-2021-38090/CVE-2020-21697/CVE-2020-22042/CVE-2020-21688/CVE-2020-22037/CVE-2020-22051/CVE-2020-22020/CVE-2025-22921/CVE-2025-22919</changelog>
</package>
<package pkgid="4ab4753785ebdbba69980e963ba40b78d69ce540f400a69efe523f04b9baae97" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="13.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
</package>
<package pkgid="68a92b6f4a1633a688a17f6a3786b46820fa9a3253b9a1ec104dab49f694f3f2" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="14.oe2203sp4"/>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 4.2.4-5" date="1714564800">- fix CVE-2024-31578</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-6" date="1718798400">- Fix CVE-2023-51794</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-7" date="1719316800">- Fix CVE-2023-51798</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316801">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
</package>
<package pkgid="d3772ab6df698f5f53f45ab3c9dc166dcd785394a6b1ddf212575a3ef1252e8f" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="17.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-8" date="1719316800">- Fix CVE-2022-3341</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
</package>
<package pkgid="e608a5430f171971ebb30393feece0b6813f5a568648c1841c8b6579a4ff278c" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="18.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-9" date="1719403200">- Fix CVE-2022-3109</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
</package>
<package pkgid="7fccadb46e050d3634556faabab36493d5396ed5eb9f1bee6162e5ec7dc0e8eb" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="19.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-10" date="1719921600">- Fix CVE-2023-51793</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921601">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921602">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
</package>
<package pkgid="7f22af7c0242c981938c2df2876279f9286104ddc5d1881faf2dc2c029df2188" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="20.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-11" date="1719921600">- Fix CVE-2023-50010</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921601">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
</package>
<package pkgid="fe391d7edcf046b8cded87db55c8f6e5e693361f8573c92b674d655080385bdd" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="21.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-12" date="1719921600">- Fix CVE-2021-38171</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-13" date="1720094400">- Fix CVE-2021-28429</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-14" date="1720612800">- The automatic compilation function is enabled for access control</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612801">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
</package>
<package pkgid="a9404cec7e9d3929aab7f7d631414357f61a69e8d89a0a761d3801170f1b8e58" name="ffmpeg-libs" arch="aarch64">
  <version epoch="0" ver="4.2.4" rel="24.oe2203sp4"/>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-15" date="1720612800">- Fix CVE-2024-32230</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-16" date="1720785600">- Fix CVE-2022-1475</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-17" date="1721044800">- Fix CVE-2022-48434</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-18" date="1726660800">- Fix CVE-2020-35965.patch</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-19" date="1732968000">- fix CVE-2024-35366 CVE-2024-35367</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-20" date="1733140800">- fix CVE-2024-35368 CVE-2024-36616</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 4.2.4-21" date="1734091200">- fix CVE-2024-36617 CVE-2024-36618</changelog>
  <changelog author="changtao &lt;changtao@kylinos.cn&gt; - 4.2.4-22" date="1736078400">- Type: CVE
- CVE: CVE-2024-36613
- SUG: NA
- DESC: fix CVE-2024-36613</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-23" date="1751630400">- Fix CVE-2020-22026/CVE-2020-22019/CVE-2020-22021/CVE-2020-22038/CVE-2020-22039/CVE-2020-22044/CVE-2020-22043</changelog>
  <changelog author="happyworker &lt;208suo@208suo.com&gt; - 4.2.4-24" date="1751976000">- Fix CVE-2021-38090/CVE-2020-21697/CVE-2020-22042/CVE-2020-21688/CVE-2020-22037/CVE-2020-22051/CVE-2020-22020/CVE-2025-22921/CVE-2025-22919</changelog>
</package>
<package pkgid="5662084a7a0abed2e0af47236a4099980d555ddee8f3157fffc764473db3a9f4" name="fftw" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.3.8-12" date="1752580800">- Add AVX2 support</changelog>
</package>
<package pkgid="7fc6cb1b9de5d767eb5e654db6cca30465e48b1631dc62a3afbe692584b6d8ef" name="fftw-devel" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.3.8-12" date="1752580800">- Add AVX2 support</changelog>
</package>
<package pkgid="9a3e38cfdfa21abf1033a9bd29c92a3adeb7219a6ad21943eb516f19154e230e" name="fftw-help" arch="noarch">
  <version epoch="0" ver="3.3.8" rel="12.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.3.8-12" date="1752580800">- Add AVX2 support</changelog>
</package>
<package pkgid="66a1c06df1562d4d0a2089fbbbb3cd218f1170be0aad5776ffa374539df7a16c" name="fftw-libs" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.3.8-12" date="1752580800">- Add AVX2 support</changelog>
</package>
<package pkgid="b345db46831ac400c0170f81c5fbcb81e1acb7523fb72beca5c0c927f3ea0b82" name="fftw-libs-double" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.3.8-12" date="1752580800">- Add AVX2 support</changelog>
</package>
<package pkgid="e4846a689ad6a846515b2fee964cf530448025cbfd64e27c77f62e3038195547" name="fftw-libs-long" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.3.8-12" date="1752580800">- Add AVX2 support</changelog>
</package>
<package pkgid="9dfc773b8f7c108dd9dabec9ea357ec6d7b10c3666d944375ecd12b234f551be" name="fftw-libs-single" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 3.3.8-12" date="1752580800">- Add AVX2 support</changelog>
</package>
<package pkgid="955df1a602c08c96d81b800a4e46c4a8a9d341c2fae783859d4fd1c63ab616a1" name="firebird" arch="aarch64">
  <version epoch="0" ver="3.0.13.33818" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.0.13.33818-1" date="1752580800">- update to 3.0.13</changelog>
</package>
<package pkgid="27ffc50c4d6a7972e35f845a608a1623067aa756b7b8826d0f00aad4690b8f4c" name="firebird-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.13.33818" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.0.13.33818-1" date="1752580800">- update to 3.0.13</changelog>
</package>
<package pkgid="3b40f5d033a9d971dde749fbd5c416c0abf7ce7ce0962fc2539529e3b49f13ea" name="firebird-debugsource" arch="aarch64">
  <version epoch="0" ver="3.0.13.33818" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.0.13.33818-1" date="1752580800">- update to 3.0.13</changelog>
</package>
<package pkgid="a1378b38ee9d9191cd7dce0c0bf96ca481bc0da797584fd8a90143a9ddbabd6e" name="firebird-devel" arch="aarch64">
  <version epoch="0" ver="3.0.13.33818" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.0.13.33818-1" date="1752580800">- update to 3.0.13</changelog>
</package>
<package pkgid="29b36aaafc8e20187c012bcf404de2bf6ca349ced3e736ed22180d77e6514015" name="firebird-help" arch="noarch">
  <version epoch="0" ver="3.0.13.33818" rel="1.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.0.13.33818-1" date="1752580800">- update to 3.0.13</changelog>
</package>
<package pkgid="9f258b4fb5223a2e7f0aa9f81419f5c530b55f8935deb30e6190313315c08c00" name="firefox" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
</package>
<package pkgid="77af8e4bb77c8b21d8627818c5f772e74d991d94379b7b8755b88e14b561f7e3" name="firefox" arch="aarch64">
  <version epoch="0" ver="128.10.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
</package>
<package pkgid="d9c08e61d8809a5b4de777f07a1797ed0ad3afff4b4a8aa13d370f51b800b691" name="firefox" arch="aarch64">
  <version epoch="0" ver="128.10.1" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
</package>
<package pkgid="e042edce2f6c688344d294c3e0a3730c602650ce3ca97da4ab1dcb4ba78274eb" name="firefox" arch="aarch64">
  <version epoch="0" ver="128.11.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
</package>
<package pkgid="bfa62748facc3b2b69c5275b3cd8fac421969a1513520cb23322c1454b023a22" name="firefox" arch="aarch64">
  <version epoch="0" ver="128.12.0" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
</package>
<package pkgid="c6a266bb4ddcfc4ceca1bd044860f38e0937fa21e8df2e150de80b4adc237954" name="firefox" arch="aarch64">
  <version epoch="0" ver="128.13.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.13.0-1" date="1753272000">- Update to 128.13.0
- Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
  CVE-2025-8033 CVE-2025-8034 CVE-2025-8035</changelog>
</package>
<package pkgid="a9258bbf1577a631bf0ec411df9aff683c5e69bbf79d920edd84db1961707009" name="firefox" arch="aarch64">
  <version epoch="0" ver="128.8.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
</package>
<package pkgid="39925e8576e61b43be6b00b866c416f4e96b03bec43d03f5e7f352ef45da7175" name="firefox" arch="aarch64">
  <version epoch="0" ver="128.9.0" rel="1.oe2203sp4"/>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
</package>
<package pkgid="cb12b33c6b142629e7370e4311012b864be98793993127711316826a72a3f6ea" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
</package>
<package pkgid="edb47555aa4e2e8a04fd54b12dd9660fd355a2b3b10f6efbef997303aaf00065" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="128.10.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
</package>
<package pkgid="b42eb3e954b915501b88339ff3d305cec815a3780b3720078aff6b5ba3429b07" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="128.10.1" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
</package>
<package pkgid="e44304d3570421bb1a8dfe1f5f5793f7133fe7741b4ec06b2627131f5f1718d3" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="128.11.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
</package>
<package pkgid="f13302f5736464b4ae19a4ae04fdae3ba0f0deb6146f4571287346b0e8570b79" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="128.12.0" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
</package>
<package pkgid="5cb464e06d14516f202e359f1931b19ccdbef9db91f9358890dc217fe01b1007" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="128.13.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.13.0-1" date="1753272000">- Update to 128.13.0
- Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
  CVE-2025-8033 CVE-2025-8034 CVE-2025-8035</changelog>
</package>
<package pkgid="b4ea592ba061d439eef7df3953d38c819ccb9c2ae3e1174c742ac29957439506" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="128.8.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
</package>
<package pkgid="dccc7c4d3966e79ed17fdfac11be0686e23a95f1470a7389416b47a901c4b372" name="firefox-debuginfo" arch="aarch64">
  <version epoch="0" ver="128.9.0" rel="1.oe2203sp4"/>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
</package>
<package pkgid="78a368f5a2c2187ae14a98371ffd630e36de93eb7bfb845e97940b139e0afb37" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="102.15.0" rel="7.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.11.0-3" date="1684756800">- Modify buildrequires rust version to 1.60</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.13.0-1" date="1688644800">- Update to 102.13.0
- Fix CVE-2023-34416 CVE-2023-34414 CVE-2023-37201 CVE-2023-37202 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211
- Remove unused patch</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
</package>
<package pkgid="381d959d756e6db33e694e5d46c33ddb40a537e322a7db1c6faba1406c805bfc" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="128.10.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
</package>
<package pkgid="305716d1a8ec19f45a4cbdedfb9dc7cdad99f4184754a0bb3b863eacf9c92896" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="128.10.1" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
</package>
<package pkgid="82f7857f9d4a860f80b7c5d5003a9ba9a52c6fc6e4d7d30116ac8eb435e7112f" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="128.11.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
</package>
<package pkgid="aa4f3539d2929aeb2644330ecba9303760651812a96a1b7d96ed1c70cc0741ab" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="128.12.0" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
</package>
<package pkgid="bec93c37a2e11448da1d1cd17eacca987e5288f489d825998142aa947702fb72" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="128.13.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.0-1" date="1746014400">- Update to 128.10.0
- Fix CVE-2025-2817 CVE-2025-4083 CVE-2025-4084 CVE-2025-4087 CVE-2025-4091 CVE-2025-4093</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.10.1-1" date="1747656000">- Update to 128.10.1
- Fix CVE-2025-4918 CVE-2025-4919</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.11.0-1" date="1749470400">- Update to 128.11.0
- Fix MFSA-TMP-2025-0001: Double-free in libvpx encoder
- Fix CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.12.0-1" date="1750852800">- Update to 128.12.0
- Fix CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.13.0-1" date="1753272000">- Update to 128.13.0
- Fix CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032
  CVE-2025-8033 CVE-2025-8034 CVE-2025-8035</changelog>
</package>
<package pkgid="f5874e2247cd613a448d6c646039347b17eb61e987996c9e8ab89c1c0701717a" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="128.8.0" rel="1.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.14.0-1" date="1691496000">- Update to 102.14.0
- Fix CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
</package>
<package pkgid="ea1588cc5d72d6fb543d5e70911fbac7ca3ecdd7981da277e5c7504e3f00cec2" name="firefox-debugsource" arch="aarch64">
  <version epoch="0" ver="128.9.0" rel="1.oe2203sp4"/>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-1" date="1695211200">- Update to 102.15.0
- Fix CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576  CVE-2023-4581 CVE-2023-4584</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-2" date="1695902400">- Fix for libwebp CVE-2023-4863</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-3" date="1698321600">- Fix for libvpx CVE-2023-5217</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-4" date="1704196800">- Fix CVE-2023-7104</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 102.15.0-5" date="1709035200">- Fix CVE-2022-3479</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 102.15.0-6" date="1713873600">- Fix CVE-2023-44488</changelog>
  <changelog author="lvfei &lt;lvfei@kylinos.cn&gt; - 102.15.0-7" date="1724760000">- Fix CVE-2024-0745</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.7.0-1" date="1738756800">- Update to 128.7.0
- Fix CVE-2022-36315 CVE-2022-36316 CVE-2022-38475 CVE-2022-45419 CVE-2022-45407 CVE-2022-45417 CVE-2022-45415
  CVE-2022-46879 CVE-2022-46885 CVE-2022-46883 CVE-2022-46873 CVE-2023-25733 CVE-2023-25731 CVE-2023-25736
  CVE-2023-28160 CVE-2023-28161 CVE-2023-28177 CVE-2023-25750 CVE-2023-29549 CVE-2023-29538 CVE-2023-29543
  CVE-2023-29547 CVE-2023-29551 CVE-2023-29540 CVE-2023-29537 CVE-2023-32216 CVE-2023-32208 CVE-2023-32209
  CVE-2023-34417 CVE-2023-34415 CVE-2023-32210 CVE-2023-37206 CVE-2023-37203 CVE-2023-37205 CVE-2023-37204
  CVE-2023-37210 CVE-2023-3482 CVE-2023-37212 CVE-2023-37209 CVE-2023-3600 CVE-2023-4058 CVE-2023-4051 CVE-2023-4053
  CVE-2023-4577 CVE-2023-4585 CVE-2023-4579 CVE-2023-4583 CVE-2023-4582 CVE-2023-4580 CVE-2023-4578 CVE-2023-5169
  CVE-2023-5175 CVE-2023-5172 CVE-2023-5170 CVE-2023-5176 CVE-2023-5173 CVE-2023-5171 CVE-2023-5732 CVE-2023-5731
  CVE-2023-5725 CVE-2023-5730 CVE-2023-5723 CVE-2023-5721 CVE-2023-5724 CVE-2023-5722 CVE-2023-5728 CVE-2023-5729
  CVE-2023-6206 CVE-2023-6210 CVE-2023-6207 CVE-2023-6211 CVE-2023-6209 CVE-2023-6213 CVE-2023-6204 CVE-2023-6212
  CVE-2023-6205 CVE-2023-6208 CVE-2023-6856 CVE-2023-6871 CVE-2023-6869 CVE-2023-6859 CVE-2023-6873 CVE-2023-6857
  CVE-2023-6872 CVE-2023-6860 CVE-2023-6867 CVE-2023-6866 CVE-2023-6858 CVE-2023-6865 CVE-2023-6863 CVE-2023-6861
  CVE-2023-6864 CVE-2023-6135 CVE-2023-6879 CVE-2024-0742 CVE-2024-0741 CVE-2024-0747 CVE-2024-0743 CVE-2024-0751
  CVE-2024-0748 CVE-2024-0744 CVE-2024-0749 CVE-2024-0754 CVE-2024-0753 CVE-2024-0755 CVE-2024-1549 CVE-2024-1547
  CVE-2024-1553 CVE-2024-1551 CVE-2024-1557 CVE-2024-1548 CVE-2024-1550 CVE-2024-1554 CVE-2024-1556 CVE-2024-1555
  CVE-2024-2613 CVE-2024-2615 CVE-2024-2609 CVE-2024-2607 CVE-2024-2611 CVE-2024-2606 CVE-2024-2616 CVE-2024-2608
  CVE-2024-2610 CVE-2024-2612 CVE-2024-2614 CVE-2023-5388 CVE-2024-29944 CVE-2024-29943 CVE-2023-6862 CVE-2024-3302
  CVE-2024-3862 CVE-2024-3857 CVE-2024-3858 CVE-2024-3865 CVE-2024-3855 CVE-2024-3853 CVE-2024-3856 CVE-2024-3861
  CVE-2024-3859 CVE-2024-3864 CVE-2024-3852 CVE-2024-3854 CVE-2024-3860 CVE-2024-4778 CVE-2024-4774 CVE-2024-4764
  CVE-2024-4776 CVE-2024-4772 CVE-2024-4367 CVE-2024-4770 CVE-2024-4771 CVE-2024-4773 CVE-2024-4775 CVE-2024-4768
  CVE-2024-4767 CVE-2024-4777 CVE-2024-4769 CVE-2024-5690 CVE-2024-5696 CVE-2024-5691 CVE-2024-5697 CVE-2024-5694
  CVE-2024-5702 CVE-2024-5695 CVE-2024-5700 CVE-2024-5692 CVE-2024-5689 CVE-2024-5693 CVE-2024-5701 CVE-2024-5698
  CVE-2024-5688 CVE-2024-5699 CVE-2024-6603 CVE-2024-6605 CVE-2024-6608 CVE-2024-6601 CVE-2024-6615 CVE-2024-6609
  CVE-2024-6611 CVE-2024-6607 CVE-2024-6604 CVE-2024-6606 CVE-2024-6610 CVE-2024-6612 CVE-2024-6602 CVE-2024-6613
  CVE-2024-6614 CVE-2024-7531 CVE-2024-7521 CVE-2024-7525 CVE-2024-7526 CVE-2024-7529 CVE-2024-7524 CVE-2024-7519
  CVE-2024-7522 CVE-2024-7527 CVE-2024-8382 CVE-2024-8384 CVE-2024-8383 CVE-2024-8381 CVE-2024-7652 CVE-2024-9400
  CVE-2024-9401 CVE-2024-9399 CVE-2024-9402 CVE-2024-9392 CVE-2024-9397 CVE-2024-9396 CVE-2024-9393 CVE-2024-9394
  CVE-2024-9398 CVE-2024-9680 CVE-2024-10464 CVE-2024-10459 CVE-2024-10467 CVE-2024-10466 CVE-2024-10462
  CVE-2024-10458 CVE-2024-10465 CVE-2024-10463 CVE-2024-10460 CVE-2024-10461 CVE-2024-10941 CVE-2024-11694
  CVE-2024-11697 CVE-2024-11692 CVE-2024-11699 CVE-2024-11696 CVE-2024-11695 CVE-2025-0237 CVE-2025-0242
  CVE-2025-1016 CVE-2025-1009 CVE-2025-1017 CVE-2025-1013 CVE-2025-1010 CVE-2025-1014 CVE-2025-1011 CVE-2025-1012</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.8.0-1" date="1741176000">- Update to 128.8.0
- Fix CVE-2024-43097 CVE-2025-1931 CVE-2025-1932 CVE-2025-1933 CVE-2025-1934
  CVE-2025-1935 CVE-2025-1936 CVE-2025-1937 CVE-2025-1938</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 128.9.0-1" date="1743595200">- Update to 128.9.0
- Fix CVE-2025-3028 CVE-2025-3029 CVE-2025-3030</changelog>
</package>
<package pkgid="f7e9f4e5d6b4997133442916835dc0fc917b304dc8571ffa883bc025b4cf35bd" name="firewalld" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="10.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partnres.com&gt; - 1.0.2-4" date="1662033600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix zone combined forward must not default to True
       fix fw icmptype don't alter ipvs in io_object
       fix check config use the dictionary variants
       fix functions check config fails if direct.xml exists
       fix service adding includes</changelog>
  <changelog author="luoqing &lt;luoqing@kylinsec.com.cn&gt; - 1.0.2-5" date="1668427200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specify the translation encoding format as UTF-8</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-6" date="1695729600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:chore nftables add delete table helper
       nftables always flush main table on start</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-7" date="1701172800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
       related ko when stopping firewalld service</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-8" date="1717761600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:To reduce unnecessary loading of ebtables-related kernel modules</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-9" date="1720180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix(nm): release NM client after a timeout</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-10" date="1720180801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix unintentinally exclude file</changelog>
</package>
<package pkgid="78f41684a949e7fd748179b35c819d789975ed83b1e7845f41e81b1c75467892" name="firewalld-doc" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="10.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partnres.com&gt; - 1.0.2-4" date="1662033600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix zone combined forward must not default to True
       fix fw icmptype don't alter ipvs in io_object
       fix check config use the dictionary variants
       fix functions check config fails if direct.xml exists
       fix service adding includes</changelog>
  <changelog author="luoqing &lt;luoqing@kylinsec.com.cn&gt; - 1.0.2-5" date="1668427200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specify the translation encoding format as UTF-8</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-6" date="1695729600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:chore nftables add delete table helper
       nftables always flush main table on start</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-7" date="1701172800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
       related ko when stopping firewalld service</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-8" date="1717761600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:To reduce unnecessary loading of ebtables-related kernel modules</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-9" date="1720180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix(nm): release NM client after a timeout</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-10" date="1720180801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix unintentinally exclude file</changelog>
</package>
<package pkgid="c307affcfcc8926d4b77a55100a7ed98f8df57bc504cff02f28e18d0135122fb" name="firewalld-test" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="10.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partnres.com&gt; - 1.0.2-4" date="1662033600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix zone combined forward must not default to True
       fix fw icmptype don't alter ipvs in io_object
       fix check config use the dictionary variants
       fix functions check config fails if direct.xml exists
       fix service adding includes</changelog>
  <changelog author="luoqing &lt;luoqing@kylinsec.com.cn&gt; - 1.0.2-5" date="1668427200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specify the translation encoding format as UTF-8</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-6" date="1695729600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:chore nftables add delete table helper
       nftables always flush main table on start</changelog>
  <changelog author="zhanghao &lt;zhanghao383@huawei.com&gt; - 1.0.2-7" date="1701172800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload
       related ko when stopping firewalld service</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-8" date="1717761600">- Type:requirement
- ID:NA
- SUG:NA
- DESC:To reduce unnecessary loading of ebtables-related kernel modules</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-9" date="1720180800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix(nm): release NM client after a timeout</changelog>
  <changelog author="zhouyihang &lt;zhouyihang3@h-partners.com&gt; - 1.0.2-10" date="1720180801">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix unintentinally exclude file</changelog>
</package>
<package pkgid="8345f6da2e09adf39f6649ed9750f666d940a68fa313474610c04224c2700668" name="flatpak" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="10.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.10.2-10" date="1750939200">- add pre scriptlet for user creation</changelog>
</package>
<package pkgid="dcfb80e30da76a2e84d6fd934df79d8579d1e1977a0a003eddcd28cb8d04a8e4" name="flatpak" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="96c3c1d166ad00f78b3916b641dd38628950e9a9fac7043da0221d418cb281e2" name="flatpak-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="10.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.10.2-10" date="1750939200">- add pre scriptlet for user creation</changelog>
</package>
<package pkgid="4e4c224685b067bde30606a7e2c0865b9426f6f1679b33834e479663f924f2ff" name="flatpak-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="dceb8fd034da3d59719f109b2bfe5f1f059dceee00a462df67c3332854ec1511" name="flatpak-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="10.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.10.2-10" date="1750939200">- add pre scriptlet for user creation</changelog>
</package>
<package pkgid="e8eea24d5ed35138ad64a1fbd3f2fcceb9f236f57686b73c520ced8c3a40d2ab" name="flatpak-debugsource" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="6941e920e5fbf081e878b99dadc87eafbf919aca7472ab3692639765084e720d" name="flatpak-devel" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="10.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.10.2-10" date="1750939200">- add pre scriptlet for user creation</changelog>
</package>
<package pkgid="013d6f522f6b7ad5493890bd120fe81a4fa471ee87b673e7f19a208b3b9283b5" name="flatpak-devel" arch="aarch64">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="b14d28f6796eb2e377e3512b837cffe44edf7dfa8ebaf927d73894671977c234" name="flatpak-help" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="10.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.10.2-10" date="1750939200">- add pre scriptlet for user creation</changelog>
</package>
<package pkgid="864946f9e2eb9121eaa7aa408a6e5d18547090644c1700ab1cd7469d22aab1e7" name="flatpak-help" arch="noarch">
  <version epoch="0" ver="1.10.2" rel="9.oe2203sp4"/>
  <changelog author="maokecheng &lt;maokecheng@xfusion.com&gt; - 1.10.2-6" date="1703592000">- DESC:Fix several memory leaks</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.10.2-7" date="1711627200">- Fix CVE-2023-28100 and CVE-2023-28101</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-8" date="1713528000">- Fix CVE-2024-32462</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.10.2-9" date="1723723200">- Fix CVE-2024-42472</changelog>
</package>
<package pkgid="9600c89fb52be8139861ecddda5670f52285046d6a2fa982ec81dffa71615d16" name="fonts-tweak-tool" arch="aarch64">
  <version epoch="0" ver="0.4.5" rel="5.oe2203sp4"/>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 0.4.5-5" date="1753272000">- fix fonts-tweak-tool run error</changelog>
</package>
<package pkgid="32a13e8dfb2261496d3e4770a950fa12fd28f1065ebccee3639922bd45998e3c" name="fonts-tweak-tool-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.4.5" rel="5.oe2203sp4"/>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 0.4.5-5" date="1753272000">- fix fonts-tweak-tool run error</changelog>
</package>
<package pkgid="cc4dcbda0c75d456b1529961d55ffa34338dcb68041a1b2c070ddacad22e45ca" name="fonts-tweak-tool-debugsource" arch="aarch64">
  <version epoch="0" ver="0.4.5" rel="5.oe2203sp4"/>
  <changelog author="peijiankang &lt;peijiankang@kylinos.cn&gt; - 0.4.5-5" date="1753272000">- fix fonts-tweak-tool run error</changelog>
</package>
<package pkgid="8b72e50a2a18f0de043a0e17a2e6cf3598cd9a60eeceeb824e854ff9053e946f" name="fop" arch="noarch">
  <version epoch="0" ver="2.2" rel="9.oe2203sp4"/>
  <changelog author="xu_ping &lt;xuping33@h-partners.com&gt; - 2.2-6" date="1669032000">- Modify invalid source</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2-7" date="1694174400">- Fix build failure caused by batik upgrade to 1.17</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 2.2-8" date="1694865600">- Remove the mif parameter in the help message</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.2-9" date="1728561600">- Fix CVE-2024-28168</changelog>
</package>
<package pkgid="23ff519bfddaf16f4b33092d74cd9acc7d520dc17e84b6f775163025e8438916" name="freeradius" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="f049bfa27dc9b9c6c68dd52a414109346564805d53fba020a4ec27fda4d86a28" name="freeradius-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="b3df85fcc5c638ef87797b4fd6741259d8a704169edf1f17d988fbaf79ed0c9c" name="freeradius-debugsource" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="89bb14472c281baf2b4ad4002b1e53e47d820c7087b9214b362d2d91f9fcc9b4" name="freeradius-devel" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="44055e16e6d9933ded147d16810967677e32ed9a04624dbf2438942e10a7e994" name="freeradius-help" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="b388dfd42be64ebe758553c160d12b193f24b701925f9ff0c7f56fbf4f22c0c1" name="freeradius-krb5" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="92a7efa452e2b7c15f5c78a6ba819cb49c67f8599a7ddb255742e3b273b0c108" name="freeradius-ldap" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="38683095b2e0c3077214e3a892a46f8f1b9725b072c3fcdf766644fb2e9ae163" name="freeradius-mysql" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="d24a3cd1ba2801b8e944ab465537ff109e70be7ad2a76b8c03a352da3243a9cf" name="freeradius-perl" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="1636acfa347b276f7af15f26d16e6ff0b927fbb0c43db3f6fc1e2a6c0a6965f7" name="freeradius-postgresql" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="07cb2e937a74bfabb54a4916676574631fda094c4c3e990a9cda18b3941f566f" name="freeradius-sqlite" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="71aac177a728f8d0333700287252968a04ab67f40f38148955cc0dc1a887c498" name="freeradius-utils" arch="aarch64">
  <version epoch="0" ver="3.0.25" rel="3.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 3.0.25-2" date="1671624000">- Fix CVE-2022-41859 and CVE-2022-41860 and CVE-2022-41861</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.0.25-3" date="1721131200">- Fix CVE-2024-3596</changelog>
</package>
<package pkgid="6c06657858d8e4244af7c36522005f3b53a0a71aa8b0123dfcab028bfadede6b" name="freetype" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="4.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
</package>
<package pkgid="f231d73d212688681d518fa2108abd304f4a155abc10154b5441799a1caa6ef7" name="freetype" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
</package>
<package pkgid="b0ebb590f45ca269a7ede740299b79f238a498e7525c245f8dbbd45c02d58425" name="freetype" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
  <changelog author="wangkun &lt;wang_kun1@hoperun.com&gt; - 2.12.1-6" date="1753358400">- fix CVE-2022-31782</changelog>
</package>
<package pkgid="0896bda3a6b327149d8374fa8ae7852b65c6f61a2e95de1c378648d559ae2b71" name="freetype-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="4.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
</package>
<package pkgid="f09b62ce1bc599a3742724114b309c72b5d726bfe006ba877cae9bbf104cd59d" name="freetype-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
</package>
<package pkgid="2abfe8ff8bccd92f1336371700d2f3cee9bdc9be89e90feba2c8ebe971aa0fdf" name="freetype-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
  <changelog author="wangkun &lt;wang_kun1@hoperun.com&gt; - 2.12.1-6" date="1753358400">- fix CVE-2022-31782</changelog>
</package>
<package pkgid="33d99ebb8e83d4917c9f1b7d8972501ad4bd18a5a4a8846a0c61c25ab0b98526" name="freetype-debugsource" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="4.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
</package>
<package pkgid="09b8f6c5d037ae59f9e8253161b0685d086931ab38cfc27055b775d32306794a" name="freetype-debugsource" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
</package>
<package pkgid="c2fddc5a9026b354362efa3eb4fa63c46a64cb5116efe01d212b2719b94b85e0" name="freetype-debugsource" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
  <changelog author="wangkun &lt;wang_kun1@hoperun.com&gt; - 2.12.1-6" date="1753358400">- fix CVE-2022-31782</changelog>
</package>
<package pkgid="e5ae34705f21236c2ae4df759192046f33a9eb7c1a19a42e7b273aad88d04b36" name="freetype-demos" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="4.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
</package>
<package pkgid="3aa2fd4ecd8853f0664753223c6ce613caef26f185b4594f89a4f2a6614f27b0" name="freetype-demos" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
</package>
<package pkgid="16e3f6b701fab03c9df85137f144a8f8f7979211cb558e353624d92379f22b33" name="freetype-demos" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
  <changelog author="wangkun &lt;wang_kun1@hoperun.com&gt; - 2.12.1-6" date="1753358400">- fix CVE-2022-31782</changelog>
</package>
<package pkgid="07330dde12f42ccd05ce32c226477315b78e18d783666444cca03b636b807df8" name="freetype-devel" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="4.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
</package>
<package pkgid="1b1afa0d2b61e73390fc9ff3c5f23a8327d66be928763abee26caa84639e9daa" name="freetype-devel" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
</package>
<package pkgid="adea035302b2313e7fd6deece3bf4ac4f42664eda9b73a9884f79b08d0a2cb8a" name="freetype-devel" arch="aarch64">
  <version epoch="0" ver="2.12.1" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
  <changelog author="wangkun &lt;wang_kun1@hoperun.com&gt; - 2.12.1-6" date="1753358400">- fix CVE-2022-31782</changelog>
</package>
<package pkgid="4ba540c83370d339e12bc9027587873de995e83c27b4ebe4f5b652462d68ac8a" name="freetype-help" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="4.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
</package>
<package pkgid="31902e4483b0571758eb490a72b0314eee3d7bb138d8e5b2eeef5cc2eb6d1be2" name="freetype-help" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="5.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.12.1-2" date="1681732800">- fix CVE-2023-2004</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
</package>
<package pkgid="6798330bc71777ee2491857a1f2edde8bef25fe49b5f6baf3bcf939bd72f71b1" name="freetype-help" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="6.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-3" date="1699963200">- enable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-4" date="1742212800">- fix CVE-2025-27363</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.12.1-5" date="1744632000">- update CVE-2025-27363 patch</changelog>
  <changelog author="wangkun &lt;wang_kun1@hoperun.com&gt; - 2.12.1-6" date="1753358400">- fix CVE-2022-31782</changelog>
</package>
<package pkgid="2127a268e8f026768eae9948c2488ee22040869cffa3c02b2368584dc25d8190" name="fuse-common" arch="aarch64">
  <version epoch="0" ver="3.10.5" rel="11.oe2203sp4"/>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; -3.10.5-6" date="1686225600">- Sync fome patches</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-7" date="1707393600">- fix memory leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-8" date="1711800000">- fix file leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-9" date="1711972800">- fix loading of modules</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-10" date="1746532800">- support fastpath</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-11" date="1747742400">- set default value of max_idle_threads</changelog>
</package>
<package pkgid="c5b822fd6795ef7628eb6b5be37d0180b68bdb711775760a3ea353af2be7c599" name="fuse3" arch="aarch64">
  <version epoch="0" ver="3.10.5" rel="11.oe2203sp4"/>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; -3.10.5-6" date="1686225600">- Sync fome patches</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-7" date="1707393600">- fix memory leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-8" date="1711800000">- fix file leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-9" date="1711972800">- fix loading of modules</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-10" date="1746532800">- support fastpath</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-11" date="1747742400">- set default value of max_idle_threads</changelog>
</package>
<package pkgid="08bd13b1473588f0c8b663029ac5f04c0ddc084bc41cc4961da8ee5eb679ec7f" name="fuse3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.10.5" rel="11.oe2203sp4"/>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; -3.10.5-6" date="1686225600">- Sync fome patches</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-7" date="1707393600">- fix memory leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-8" date="1711800000">- fix file leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-9" date="1711972800">- fix loading of modules</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-10" date="1746532800">- support fastpath</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-11" date="1747742400">- set default value of max_idle_threads</changelog>
</package>
<package pkgid="eb5946b4fed75674ba3a866009d2e2e22db71b28ae8d6055cce5d7195f35a9e9" name="fuse3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.10.5" rel="11.oe2203sp4"/>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; -3.10.5-6" date="1686225600">- Sync fome patches</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-7" date="1707393600">- fix memory leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-8" date="1711800000">- fix file leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-9" date="1711972800">- fix loading of modules</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-10" date="1746532800">- support fastpath</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-11" date="1747742400">- set default value of max_idle_threads</changelog>
</package>
<package pkgid="ea9acbac3d32f0f7d5c90768943d073be912370232f10237851d72f23f06b8d5" name="fuse3-devel" arch="aarch64">
  <version epoch="0" ver="3.10.5" rel="11.oe2203sp4"/>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; -3.10.5-6" date="1686225600">- Sync fome patches</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-7" date="1707393600">- fix memory leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-8" date="1711800000">- fix file leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-9" date="1711972800">- fix loading of modules</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-10" date="1746532800">- support fastpath</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-11" date="1747742400">- set default value of max_idle_threads</changelog>
</package>
<package pkgid="5122d10a0b5d9bcdfbba360e74bb6b34b8e711b7303b2fbcea00abacc885cd93" name="fuse3-help" arch="aarch64">
  <version epoch="0" ver="3.10.5" rel="11.oe2203sp4"/>
  <changelog author="volcanodragon &lt;linfeilong@huawei.com&gt; -3.10.5-6" date="1686225600">- Sync fome patches</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-7" date="1707393600">- fix memory leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-8" date="1711800000">- fix file leak in high level API</changelog>
  <changelog author="yangyun &lt;yangyun50@huawei.com&gt; -3.10.5-9" date="1711972800">- fix loading of modules</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-10" date="1746532800">- support fastpath</changelog>
  <changelog author="chenrenhui &lt;chenrenhui1@huawei.com&gt; -3.10.5-11" date="1747742400">- set default value of max_idle_threads</changelog>
</package>
<package pkgid="24df9f4a2f3a7cbf80448b0241a3d55b7d7a3bfb2858c92af50a003adfa93533" name="gala-anteater" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="3.oe2203sp4"/>
  <changelog author="Zhen Chen &lt;chenzhen126@huawei.com&gt; - 1.0.1-2" date="1673956800">- fix str2enum bug &amp; data query refactor
- add systemd service for anteater
- remove 'sys-level' config param
- add chinese descriptions
- Update TCP Establish Model &amp; Add Nic Loss Detector
- Add disk throughput detector</changelog>
  <changelog author="Zhen Chen &lt;chenzhen126@huawei.com&gt; - 1.0.1-3" date="1674129600">- fix missing Requires:python3-pyyaml</changelog>
  <changelog author="Zhen Chen &lt;chenzhen126@huawei.com&gt; - 1.0.1-4" date="1674216000">- eliminate 'Fail to try-restart' warning when downgrading to 1.0.1-1</changelog>
  <changelog author="Li Zhenxing &lt;lizhenxing11@huawei.com&gt; - 1.1.0-1" date="1693483200">- Upgrade anteater version to 1.1.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-1" date="1725105600">- Upgrade anteater version to 1.2.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-2" date="1726660800">- Fixbug with large value exceed</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-3" date="1726920000">- Fixbug with rca time range extend.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-1" date="1730808000">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-2" date="1731067200">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-3" date="1731153600">- remove unuse code plot network.</changelog>
</package>
<package pkgid="d2a6ac82f321cc0ce9e8e30caa28c0d2eee02fe528927aa41fa6dd4638913563" name="gala-anteater" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="5.oe2203sp4"/>
  <changelog author="Zhen Chen &lt;chenzhen126@huawei.com&gt; - 1.0.1-4" date="1674216000">- eliminate 'Fail to try-restart' warning when downgrading to 1.0.1-1</changelog>
  <changelog author="Li Zhenxing &lt;lizhenxing11@huawei.com&gt; - 1.1.0-1" date="1693483200">- Upgrade anteater version to 1.1.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-1" date="1725105600">- Upgrade anteater version to 1.2.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-2" date="1726660800">- Fixbug with large value exceed</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-3" date="1726920000">- Fixbug with rca time range extend.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-1" date="1730808000">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-2" date="1731067200">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-3" date="1731153600">- remove unuse code plot network.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-4" date="1731326400">- solve conflict.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-5" date="1732190400">- fixbug with wrong label in dbscan.</changelog>
</package>
<package pkgid="f90f26189de0020075d328a214adaa115d2952bff674a709eeef28aa320f99cb" name="gala-anteater" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="6.oe2203sp4"/>
  <changelog author="Li Zhenxing &lt;lizhenxing11@huawei.com&gt; - 1.1.0-1" date="1693483200">- Upgrade anteater version to 1.1.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-1" date="1725105600">- Upgrade anteater version to 1.2.0</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-2" date="1726660800">- Fixbug with large value exceed</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.0-3" date="1726920000">- Fixbug with rca time range extend.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-1" date="1730808000">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-2" date="1731067200">- Add new feature slow node detection.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-3" date="1731153600">- remove unuse code plot network.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-4" date="1731326400">- solve conflict.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-5" date="1732190400">- fixbug with wrong label in dbscan.</changelog>
  <changelog author="huangbin &lt;huangbin58@huawei.com&gt; - 1.2.1-6" date="1732708800">- add detect type for usad model.</changelog>
</package>
<package pkgid="24cc0b7bcc7581edfc28c2d0ba038801fc026aebbae96b7314b2a1b5117ea9cc" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="48.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-47" date="1719576000">- fix coredump when get empty from udp sendring
- [virtio]: distribute pkg by dst_port
- parse packages type in rx_poll
- [virtio]: cfg ipv4 and ipv6 addr
- fix build failed in 2003sp4
- fix dpdk_bond_primary_set bug
- cfg: del unnecessary logs
- perftool: add latency tool</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-48" date="1720180800">- add flow_bifurcation switch in lstack_cfg file
- virtio: dfx data of virtio
- virtio: update g_rule_port by reg_ring_type enum
- virtio: mode actual_queue_num
- fix poll init not clear old fd</changelog>
</package>
<package pkgid="c4883d6a1fc8514992026e69dc5b09c689058f0ec35c6ea628a81ca75d10b484" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="59.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-50" date="1720699200">- cleancode: rename gazelle files in lwip
- add .gitignore
- cleancode: improving makefile readability</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-51" date="1721390400">- cleancode: refactor sys_now and lwip_ioctl
- add sem post when update event
- cleancode: refactor lwipgz_hlist.h
- fix EPOLLIN event dropd
- cleancode: refactor lwipgz_list.h
- cleancode: refactor posix_api
- fix some error of NULL pointer
- cleancode: refactor posix type and get_socket
- cleancode: refactor lwipsock.h</changelog>
  <changelog author="yangchen555 &lt;yangchen145@huawei.com&gt; - 1.0.2-52" date="1721908800">- fix redis coredump when hugetlbs pagesize is 1024M
- vitio_user: modify mbuf index for bond4
- Check the return of lwip_init
- support kernel connect
- POSIX: fix select timeout disable and build failed in openEuler 2003</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-53" date="1722600000">- virtio_user: modify mbuf index for bond4
- fix issue: create virtio_user based on bond4 main network card
- virtio: fix dfx error with multiple cpus
- dfx: optimize gazellectl -x for bond</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-54" date="1723204800">- refector fill udp sendring
- virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
- virtio_user: add vlan info for kernerl packets when vlan switch is on
- WRAP:fix double connect lead posix api disable</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-55" date="1723809600">- virtio: mod virtio_user_name when multi process is on
- WRAP: fix bind log error
- WRAP:fix ltran mode did not bind kernel while open kni
- virtio_user: The program establishes a network connection when network card status is up
- fix redis coredump ctrl-c during the pressure test</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-56" date="1724414400">- virtio: solve compilation error in 2003sp3
- virtio_user: check netif status</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-57" date="1724673600">- CMAKE: fix ltran build error in 2403</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 1.0.2-58" date="1724846400">- add riscv64 to %ExclusiveArch</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-59" date="1725019200">- epoll: fix wild pointer detected by cooddy
- tools: fix sync patch script date wrong and update the way get patchnum
- cfg: modify maximum tcp_conn_count to 2w
- fix mbuf_total calculation error</changelog>
</package>
<package pkgid="5a49909caf87a110866798aedbede0595e63ae5cb8997fddb491c913007ee5d9" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="69.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-60" date="1725624000">- fix: when errno is ENOTCONN, ignore it
- tools: fix script generate patchname wrong</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
</package>
<package pkgid="4ae164926957f0233c7278b37afaa9f1873f4b8ac501f69995a6645dcd68af48" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="70.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
</package>
<package pkgid="46f34dbe92c2ffc7f13d0405941e1b5d5cb5a65e2f02c85cd1b083160a976704" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="71.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
</package>
<package pkgid="4ffd67ff89d73d9ba068b2fd1a8f448584c09c3337e4e72632a90a940c00fb3f" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="73.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438400">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438401">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
</package>
<package pkgid="08cd54bedddc033ad1a64bc8f06dba31e94d86973dbbc95b29c116ee0ae08406" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="76.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
</package>
<package pkgid="60df7b8096f1b443d00077fbf5a01d688bb4c01ca42bb77cc9138d1c4ac27da5" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="77.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
</package>
<package pkgid="070fb7b03fb11b2ee87cb8d5b1c2987248abf5d6ede9253ddc8481b2835a15a9" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="78.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561600">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
</package>
<package pkgid="c76c5aa5a0eb05ad1074b5cf2985b763556eac65ab7240cd283d43adeb2d2d86" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="79.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
</package>
<package pkgid="b8ef5021e69e92b3d369729fb95d74060b7bc469f5d5922e1f3e1eb46221a2c4" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="80.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
</package>
<package pkgid="7a6ade7a3f80b315b1a3f8ab6f2168af727a1ba7f0db14a308152707bd3d89b9" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="84.oe2203sp4"/>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-81" date="1734609600">- DUMP: fix build error of oe2003 because of micro is not defined.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-82" date="1736510400">- DUMP: fix abnomal printing in the dump process.
- SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
- SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-83" date="1737115200">- SIGNAL: block SIGSEGV during exit process
- Stack: unset stack_stop, while stacks exit by rpc message.
- fix the memory leak when using strdup</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-84" date="1741089600">- update gazelle max numa nodes 8
- Protocal: fixing deathlock between protocol threads and app thread
- Connect: fix benchmark_dws connect failed
- RTC-mode: fix gazellectl can't print connenct info
- add xdp tx checksum/tso offload</changelog>
</package>
<package pkgid="55c5073259854344937596040211d18a9d3ac8c4f41a29af2d0c129bbebc86d2" name="gazelle" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="85.oe2203sp4"/>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-81" date="1734609600">- DUMP: fix build error of oe2003 because of micro is not defined.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-82" date="1736510400">- DUMP: fix abnomal printing in the dump process.
- SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
- SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-83" date="1737115200">- SIGNAL: block SIGSEGV during exit process
- Stack: unset stack_stop, while stacks exit by rpc message.
- fix the memory leak when using strdup</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-84" date="1741089600">- update gazelle max numa nodes 8
- Protocal: fixing deathlock between protocol threads and app thread
- Connect: fix benchmark_dws connect failed
- RTC-mode: fix gazellectl can't print connenct info
- add xdp tx checksum/tso offload</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-85" date="1752062400">- sockio: fix rpc_send coredump after RPC_MSG_EXIT
- sockio: fix tcp_write not remove EPOLLOUT
- fix 20.03-LTS build failed
- sk_wait: igonre mem_thread flush signal
- sockio: fix sendmbox full return EWOULDBLOCK
- sockio: fix callback_tcp_send output too many at once
- mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
- sockctl: fix rtw broadcast close and shutdown
- poll: fix do_lwip_connected_callback not delete poll kernel fd
- sk_event: fix rtw epoll wrong event notify and remove
- sockio: fix rtw_stack_tcp_write wrong copied_total after append
- epoll: fix do_lwip_connected_callback
- sk_wait: fix lwip_wait_foreach_notify coredump at startup
- socket: fix stack_udp_readmsg return len
- sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
- mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
- sk_wait: fix lwip_tcp_allow_send coredump
- mempool: stop using cache when too many threads
- mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
- mempool: mem_get_rpc add reserve limit
- mempool: fix mbox_ring free not call recv_finish_burst
- mempool: modify mbuf num and rpc_msg num
- socket: fix sk_wait cannot be interrupted by signals
- socket: fix tcp closed
- tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
- socket: fix stack_tcp_read do not recv_finish_burst
- socket: fix connect blocking
- mempool: fix copy_mbuf_private
- dfx: support sk_wait stat
- mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
- cfg: add mem_async_mode
- cfg: add mem_cache_max and change default rpc_msg_max
- socket: adapt to tcp and udp
- socket: refactor tcp and udp
- socket: adapt to sock_event
- socket: refactor sock_event
- cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
- cleancode: remove gazelle_light_ring
- cleancode: add GAZELLE_SAME_NODE
- RTC: fixing program stuck while gazelle exit in multi-threads envirement</changelog>
</package>
<package pkgid="24209d30582814dc9f1ccd2418108444e44eea48cbd1b70034042ec53226436e" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="48.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-47" date="1719576000">- fix coredump when get empty from udp sendring
- [virtio]: distribute pkg by dst_port
- parse packages type in rx_poll
- [virtio]: cfg ipv4 and ipv6 addr
- fix build failed in 2003sp4
- fix dpdk_bond_primary_set bug
- cfg: del unnecessary logs
- perftool: add latency tool</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-48" date="1720180800">- add flow_bifurcation switch in lstack_cfg file
- virtio: dfx data of virtio
- virtio: update g_rule_port by reg_ring_type enum
- virtio: mode actual_queue_num
- fix poll init not clear old fd</changelog>
</package>
<package pkgid="80602f32a8b9afb87b3bde8caad7a7765d6d86524dd1f66ff247aa012005d5ad" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="59.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-50" date="1720699200">- cleancode: rename gazelle files in lwip
- add .gitignore
- cleancode: improving makefile readability</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-51" date="1721390400">- cleancode: refactor sys_now and lwip_ioctl
- add sem post when update event
- cleancode: refactor lwipgz_hlist.h
- fix EPOLLIN event dropd
- cleancode: refactor lwipgz_list.h
- cleancode: refactor posix_api
- fix some error of NULL pointer
- cleancode: refactor posix type and get_socket
- cleancode: refactor lwipsock.h</changelog>
  <changelog author="yangchen555 &lt;yangchen145@huawei.com&gt; - 1.0.2-52" date="1721908800">- fix redis coredump when hugetlbs pagesize is 1024M
- vitio_user: modify mbuf index for bond4
- Check the return of lwip_init
- support kernel connect
- POSIX: fix select timeout disable and build failed in openEuler 2003</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-53" date="1722600000">- virtio_user: modify mbuf index for bond4
- fix issue: create virtio_user based on bond4 main network card
- virtio: fix dfx error with multiple cpus
- dfx: optimize gazellectl -x for bond</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-54" date="1723204800">- refector fill udp sendring
- virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
- virtio_user: add vlan info for kernerl packets when vlan switch is on
- WRAP:fix double connect lead posix api disable</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-55" date="1723809600">- virtio: mod virtio_user_name when multi process is on
- WRAP: fix bind log error
- WRAP:fix ltran mode did not bind kernel while open kni
- virtio_user: The program establishes a network connection when network card status is up
- fix redis coredump ctrl-c during the pressure test</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-56" date="1724414400">- virtio: solve compilation error in 2003sp3
- virtio_user: check netif status</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-57" date="1724673600">- CMAKE: fix ltran build error in 2403</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 1.0.2-58" date="1724846400">- add riscv64 to %ExclusiveArch</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-59" date="1725019200">- epoll: fix wild pointer detected by cooddy
- tools: fix sync patch script date wrong and update the way get patchnum
- cfg: modify maximum tcp_conn_count to 2w
- fix mbuf_total calculation error</changelog>
</package>
<package pkgid="cdcc491a42af30387e9294abd21ded84df50b48cff830c056c78a6d7e9fa895c" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="69.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-60" date="1725624000">- fix: when errno is ENOTCONN, ignore it
- tools: fix script generate patchname wrong</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
</package>
<package pkgid="f5a5dc116d625bf339e45fd39d63510e2aab5877d3dfe39e334c9a8f7e098700" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="70.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
</package>
<package pkgid="d338693fbe34b84d83ab9aa0051ad3cb77290e8131bca1292a6fad66a067b384" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="71.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
</package>
<package pkgid="3faca4b3c396088d6574edc0a840c0c9f3285818c96912e016fbfe51fc9212df" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="73.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438400">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438401">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
</package>
<package pkgid="074497d7dea4deb83e471424ccf1c02d43978a3f20258c6958d5649f2b40322e" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="76.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
</package>
<package pkgid="e72028f64cd994f4d33efb010c069f1055d932db0ee0233001aa3683a39b5ac3" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="77.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
</package>
<package pkgid="81a2f7837203c473c0b7fd968a7b67a748d0a9e7c6f1d2ec53aa61afeebd5471" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="78.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561600">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
</package>
<package pkgid="de526fb9e8e198dc9905add6b902cdccd0088280fb633d3931b3fe6400f5b3b5" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="79.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
</package>
<package pkgid="f4c98d5e77cf011a4cdb3f78288b52df3910d0e70ff2b7f288f9e0a3321140e4" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="80.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
</package>
<package pkgid="4c121722b74383649e571015ef0f8c355914988482c1e06ad8514247042fe1c4" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="84.oe2203sp4"/>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-81" date="1734609600">- DUMP: fix build error of oe2003 because of micro is not defined.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-82" date="1736510400">- DUMP: fix abnomal printing in the dump process.
- SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
- SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-83" date="1737115200">- SIGNAL: block SIGSEGV during exit process
- Stack: unset stack_stop, while stacks exit by rpc message.
- fix the memory leak when using strdup</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-84" date="1741089600">- update gazelle max numa nodes 8
- Protocal: fixing deathlock between protocol threads and app thread
- Connect: fix benchmark_dws connect failed
- RTC-mode: fix gazellectl can't print connenct info
- add xdp tx checksum/tso offload</changelog>
</package>
<package pkgid="8b7d25fa4d355da4649bcd17744dd05f5204345787f5d61a72579d74afc88d7d" name="gazelle-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="85.oe2203sp4"/>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-81" date="1734609600">- DUMP: fix build error of oe2003 because of micro is not defined.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-82" date="1736510400">- DUMP: fix abnomal printing in the dump process.
- SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
- SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-83" date="1737115200">- SIGNAL: block SIGSEGV during exit process
- Stack: unset stack_stop, while stacks exit by rpc message.
- fix the memory leak when using strdup</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-84" date="1741089600">- update gazelle max numa nodes 8
- Protocal: fixing deathlock between protocol threads and app thread
- Connect: fix benchmark_dws connect failed
- RTC-mode: fix gazellectl can't print connenct info
- add xdp tx checksum/tso offload</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-85" date="1752062400">- sockio: fix rpc_send coredump after RPC_MSG_EXIT
- sockio: fix tcp_write not remove EPOLLOUT
- fix 20.03-LTS build failed
- sk_wait: igonre mem_thread flush signal
- sockio: fix sendmbox full return EWOULDBLOCK
- sockio: fix callback_tcp_send output too many at once
- mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
- sockctl: fix rtw broadcast close and shutdown
- poll: fix do_lwip_connected_callback not delete poll kernel fd
- sk_event: fix rtw epoll wrong event notify and remove
- sockio: fix rtw_stack_tcp_write wrong copied_total after append
- epoll: fix do_lwip_connected_callback
- sk_wait: fix lwip_wait_foreach_notify coredump at startup
- socket: fix stack_udp_readmsg return len
- sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
- mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
- sk_wait: fix lwip_tcp_allow_send coredump
- mempool: stop using cache when too many threads
- mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
- mempool: mem_get_rpc add reserve limit
- mempool: fix mbox_ring free not call recv_finish_burst
- mempool: modify mbuf num and rpc_msg num
- socket: fix sk_wait cannot be interrupted by signals
- socket: fix tcp closed
- tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
- socket: fix stack_tcp_read do not recv_finish_burst
- socket: fix connect blocking
- mempool: fix copy_mbuf_private
- dfx: support sk_wait stat
- mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
- cfg: add mem_async_mode
- cfg: add mem_cache_max and change default rpc_msg_max
- socket: adapt to tcp and udp
- socket: refactor tcp and udp
- socket: adapt to sock_event
- socket: refactor sock_event
- cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
- cleancode: remove gazelle_light_ring
- cleancode: add GAZELLE_SAME_NODE
- RTC: fixing program stuck while gazelle exit in multi-threads envirement</changelog>
</package>
<package pkgid="1659e2b0f6fed1d8206cd36fcfb2b82cd625871b6551fd04d4c53147a18e5021" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="48.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1.0.2-43" date="1718366400">- refacotr udp send</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-44" date="1719316800">- sync solve compile err in 20.03</changelog>
  <changelog author="yinbin&lt;yinbin6@huawei.com&gt; - 1.0.2-45" date="1719316801">- fix changelog version incorrect</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-46" date="1719403200">- fix function call error</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-47" date="1719576000">- fix coredump when get empty from udp sendring
- [virtio]: distribute pkg by dst_port
- parse packages type in rx_poll
- [virtio]: cfg ipv4 and ipv6 addr
- fix build failed in 2003sp4
- fix dpdk_bond_primary_set bug
- cfg: del unnecessary logs
- perftool: add latency tool</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-48" date="1720180800">- add flow_bifurcation switch in lstack_cfg file
- virtio: dfx data of virtio
- virtio: update g_rule_port by reg_ring_type enum
- virtio: mode actual_queue_num
- fix poll init not clear old fd</changelog>
</package>
<package pkgid="fec6932daa96f9ae3b18a23e740c0c81943006dfeaa276c253dfd6f66fa39ecc" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="59.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-50" date="1720699200">- cleancode: rename gazelle files in lwip
- add .gitignore
- cleancode: improving makefile readability</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-51" date="1721390400">- cleancode: refactor sys_now and lwip_ioctl
- add sem post when update event
- cleancode: refactor lwipgz_hlist.h
- fix EPOLLIN event dropd
- cleancode: refactor lwipgz_list.h
- cleancode: refactor posix_api
- fix some error of NULL pointer
- cleancode: refactor posix type and get_socket
- cleancode: refactor lwipsock.h</changelog>
  <changelog author="yangchen555 &lt;yangchen145@huawei.com&gt; - 1.0.2-52" date="1721908800">- fix redis coredump when hugetlbs pagesize is 1024M
- vitio_user: modify mbuf index for bond4
- Check the return of lwip_init
- support kernel connect
- POSIX: fix select timeout disable and build failed in openEuler 2003</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-53" date="1722600000">- virtio_user: modify mbuf index for bond4
- fix issue: create virtio_user based on bond4 main network card
- virtio: fix dfx error with multiple cpus
- dfx: optimize gazellectl -x for bond</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-54" date="1723204800">- refector fill udp sendring
- virtio_user: solve the issue that failed to bind virtio_user's IPv6 address
- virtio_user: add vlan info for kernerl packets when vlan switch is on
- WRAP:fix double connect lead posix api disable</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-55" date="1723809600">- virtio: mod virtio_user_name when multi process is on
- WRAP: fix bind log error
- WRAP:fix ltran mode did not bind kernel while open kni
- virtio_user: The program establishes a network connection when network card status is up
- fix redis coredump ctrl-c during the pressure test</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-56" date="1724414400">- virtio: solve compilation error in 2003sp3
- virtio_user: check netif status</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-57" date="1724673600">- CMAKE: fix ltran build error in 2403</changelog>
  <changelog author="laokz &lt;zhangkai@iscas.ac.cn&gt; - 1.0.2-58" date="1724846400">- add riscv64 to %ExclusiveArch</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-59" date="1725019200">- epoll: fix wild pointer detected by cooddy
- tools: fix sync patch script date wrong and update the way get patchnum
- cfg: modify maximum tcp_conn_count to 2w
- fix mbuf_total calculation error</changelog>
</package>
<package pkgid="318d9ac8aa0c4f9b16d1fcd4a60f65fbb56de54bbd71474fb067e3416f0722dd" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="69.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-60" date="1725624000">- fix: when errno is ENOTCONN, ignore it
- tools: fix script generate patchname wrong</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
</package>
<package pkgid="1357d73ef43401bbb63528320099ea776714dbcfc952aa2ebedb9cebcc28fdc1" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="70.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-61" date="1726228800">- example: solve double free
- rtc: do_lwip_init_sock no need to create ring in rtc mode</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
</package>
<package pkgid="d2d231b1caf536418012b6498a847c59fcce8b5a33bad7728cc010364e2ebddb" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="71.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-62" date="1726833600">- WRAP: support setsockopt SO_SNDTIMEO SO_SNBUF</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-63" date="1727438400">- LOG:add log when udp send_ring is exhausted
- DFX: adapt log optimization</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438401">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438402">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
</package>
<package pkgid="8d068f8dc17a785175515d2ae09a2a4b45e248f9c45b582ddd53370e79117cec" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="73.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-64" date="1727438400">- cleancode: declare different cfg_params types
- cleancode: add rpc_async_call, remove rpc_msg_arg.socklen, fix some format
- cleancode: move some API from stack to rpc and rtw
- cleancode: refactor rtc_api rtw_api and dummy_api</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-65" date="1727438401">- Fill in a portion of mbuf to send_ring, when mbuf is insufficient.</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-66" date="1727611200">- af_xdp: set rlimit unlimit when gazelle init
- add interrupt mode support
- add pingpong dfx support</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
</package>
<package pkgid="88552722f8f98d3bf55919c9bb1c6ee82037f5e340dc01d8d2ecb29e28a11a1d" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="76.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-67" date="1728475200">- bugfix: fix gazelle init failed while setup by non-root user
- rpc: fix rpc_sync_call spinlock block when msg be recalled
- rtw: fix send length exceeding send_ring_size
- fix stack null when register interrupt</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
</package>
<package pkgid="ba3cbf0e1cb56dcb5e55b0047482bfd3bb30271c697358ad1f592485f0652b2c" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="77.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-68" date="1728561600">- xdp: skip checksum temporarily due to kernel cannot transfer offloads</changelog>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561601">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
</package>
<package pkgid="23c92bd917a2c6341087b9f6997eb7cf9fb49b6ab754c300a0b90ff33c2375cd" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="78.oe2203sp4"/>
  <changelog author="yinbin6 &lt;jiangheng14@huawei.com&gt; - 1.0.2-69" date="1728561600">- fix dpdk_nic_is_xdp coredump in ltran mode</changelog>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
</package>
<package pkgid="88d7cd73ba665ef18301bbf9ca9b9376b136a4e2d87c8e1de8c1df2680153768" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="79.oe2203sp4"/>
  <changelog author="yangchen &lt;yangchen145@huawei.com&gt; - 1.0.2-70" date="1728648000">- fix the coredump when gazellectl -l</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
</package>
<package pkgid="8396ccd3b88422f08d0cd46e6f93b57b7cfdcd0cef0de63694a936575f77dae4" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="80.oe2203sp4"/>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-71" date="1729684800">- epoll: remove unnecessary judgment code
- control: call epoll_ctl delete fd when fd close</changelog>
  <changelog author="hantwofish &lt;hankangkang5@huawei.com&gt; - 1.0.2-72" date="1729944000">- slove compile err when GAZELLE_TCP_REUSE_IPPORT is off</changelog>
  <changelog author="hantwofish &lt;yinbin8@huawei.com&gt; - 1.0.2-73" date="1730462400">- xdp: support XDP_STATISTICS by posix_api-&gt;getsockopt_fn
- add SO_NUMA_ID(optname) for adapting opneGauss
- remove the unused return variable.
- Fix annotation errors
- bugfix: start fail when executing the popen command for the second time in openGauss</changelog>
  <changelog author="yinbin &lt;jiangheng14@huawei.com&gt; - 1.0.2-74" date="1731067200">- LOG: Optimize some log displays
- remove: code about nobolck mode for mysql
- interrupt: fix timeout events cannot be counted</changelog>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
</package>
<package pkgid="79840fd93d197dc2574e2fa94f582d26cca0a9b75cea9778a2207c303fe963dc" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="84.oe2203sp4"/>
  <changelog author="yinbin &lt;chengyechun1@huawei.com&gt; - 1.0.2-75" date="1731672000">- suport kernel accept for openGauss
- support auto set xdp addr
- xdp: support bind no cpu mode</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-81" date="1734609600">- DUMP: fix build error of oe2003 because of micro is not defined.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-82" date="1736510400">- DUMP: fix abnomal printing in the dump process.
- SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
- SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-83" date="1737115200">- SIGNAL: block SIGSEGV during exit process
- Stack: unset stack_stop, while stacks exit by rpc message.
- fix the memory leak when using strdup</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-84" date="1741089600">- update gazelle max numa nodes 8
- Protocal: fixing deathlock between protocol threads and app thread
- Connect: fix benchmark_dws connect failed
- RTC-mode: fix gazellectl can't print connenct info
- add xdp tx checksum/tso offload</changelog>
</package>
<package pkgid="782faf35939b0f2eac8330a72a9436549e0247fb72dc356b7e1907f0cb0b8fb3" name="gazelle-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="85.oe2203sp4"/>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-76" date="1732104000">- socket: init wakeup in blocking socket
- openGauss: support kernel accept4</changelog>
  <changelog author="yinbin &lt;yinbin8@huawei.com&gt; - 1.0.2-77" date="1732708800">- openGauss: support kernel connnect
- xdp: support stack bind numa
- CFG: fix xdp iface check error
- fix build error in 2003SP4
- cfg: show dpdk args after dpdk_adjust_args
- fix free null pointer when no matching device is found
- update test/unitest/ltran/ltran_param_test.c.
- Fix the wrong spelling description in the notes and logs
- LWIP: adjust position of shutdown in callback of connect
- fix socket of control thread is overwirtten due to another primary process start</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-78" date="1733313600">- DUMP: gazelle supports dump lstack</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-79" date="1733918400">- cfg: notify that it's unsupported, when stack_num &gt; 1
- fix errno == ETIMEFOUT
- fix epoll and recv threads blocked on the same semaphore. data cannot be read in recv thread.
- fix rpc pool leak, when thread exits
- remove app_bind_numa check from exclude_cpus
- openGauss: fix connection attempt failed
- openGauss: fix gs_ctl switchover failed</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-80" date="1734523200">- Connect: execute lwip connect if dst_ip and host_ip are in the same network.
- kernerl bind: add ipv6 add check
- openGauss unsupport_tcp_optname
- fix a contention issue when rpc pools are added to rpc_pool_array</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-81" date="1734609600">- DUMP: fix build error of oe2003 because of micro is not defined.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-82" date="1736510400">- DUMP: fix abnomal printing in the dump process.
- SIGNAL: Adjust hijack sigal table to hijack SIGABRT SIGQUIT and delet SIGKILL
- SIGNAL: Adjust sigaction function to keep lstack signal function executed successfully.</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-83" date="1737115200">- SIGNAL: block SIGSEGV during exit process
- Stack: unset stack_stop, while stacks exit by rpc message.
- fix the memory leak when using strdup</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-84" date="1741089600">- update gazelle max numa nodes 8
- Protocal: fixing deathlock between protocol threads and app thread
- Connect: fix benchmark_dws connect failed
- RTC-mode: fix gazellectl can't print connenct info
- add xdp tx checksum/tso offload</changelog>
  <changelog author="yinbin6 &lt;yinbin8@huawei.com&gt; - 1.0.2-85" date="1752062400">- sockio: fix rpc_send coredump after RPC_MSG_EXIT
- sockio: fix tcp_write not remove EPOLLOUT
- fix 20.03-LTS build failed
- sk_wait: igonre mem_thread flush signal
- sockio: fix sendmbox full return EWOULDBLOCK
- sockio: fix callback_tcp_send output too many at once
- mempool: increase MEM_THREAD_MANAGER_FREE_S to avoid poll
- sockctl: fix rtw broadcast close and shutdown
- poll: fix do_lwip_connected_callback not delete poll kernel fd
- sk_event: fix rtw epoll wrong event notify and remove
- sockio: fix rtw_stack_tcp_write wrong copied_total after append
- epoll: fix do_lwip_connected_callback
- sk_wait: fix lwip_wait_foreach_notify coredump at startup
- socket: fix stack_udp_readmsg return len
- sk_wait: fix sock_wait_common_free socket: simplify calling free_count in rtw_stack_tcp_write
- mbox: fix mbox_ring_common_free coredump when rte_ring_create failed
- sk_wait: fix lwip_tcp_allow_send coredump
- mempool: stop using cache when too many threads
- mempool: fix pthread_tryjoin_np coredump when mysqld shutdown
- mempool: mem_get_rpc add reserve limit
- mempool: fix mbox_ring free not call recv_finish_burst
- mempool: modify mbuf num and rpc_msg num
- socket: fix sk_wait cannot be interrupted by signals
- socket: fix tcp closed
- tcp: add GAZELLE_TCP_ASYNC_RECVD      fix mbuf OOM caused by untimely sockio_peek_recv_free
- socket: fix stack_tcp_read do not recv_finish_burst
- socket: fix connect blocking
- mempool: fix copy_mbuf_private
- dfx: support sk_wait stat
- mempool: add mem_thread_cache_flush          fix PBUF_POOL_PREINIT
- cfg: add mem_async_mode
- cfg: add mem_cache_max and change default rpc_msg_max
- socket: adapt to tcp and udp
- socket: refactor tcp and udp
- socket: adapt to sock_event
- socket: refactor sock_event
- cleancode: remove get_stack_tid DPDK_PKT_BURST_SIZE PACKET_READ_SIZE
- cleancode: remove gazelle_light_ring
- cleancode: add GAZELLE_SAME_NODE
- RTC: fixing program stuck while gazelle exit in multi-threads envirement</changelog>
</package>
<package pkgid="3d913481ca573928ba983e87bc381d7ae8cec058c1d684cb5d3a4ea09cd28f9b" name="gcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="054d3143953fd76e661de60f1cd812eee614c3443e15936e86e1c292be68a0d3" name="gcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="0f3202c024f382ec294903a7b720e7a0af0a6ca6f1f3f524fe9f8a9b46fd0236" name="gcc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="d740cdd4b8a75551983bad018f7671648dd16468e565926752585037c1ffadaf" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="9d7864f3db671807eba5e7ecc7a53c592ad6bec13299a5fcc15ec2c1818a40de" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="7a99f94f7f75256523cc0d090e0cbc5d1bd355e44f64e97bb18cc69213296db3" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="fd795020132d695c8c4f090a5af52cd594b949aa1e9828c8aca1616a030bc9d2" name="gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="700b65d5e6445acc069a585af02bfef57fcc2a32483b0b174f20fa94ca813af6" name="gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="8e9d93d6c1421f704b103e7465df0b3eddfcbde571dea06dc3df122c9b4d9880" name="gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="dde9b7a9721ffb5a470d743973a953ea09f96b8c37f60e34084ab424c1d02acd" name="gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="c25e720af2a97c48740b97d40e518431ee6f2a7e20056381a0d84f30e6888912" name="gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="138e8e3e481e0360209059d6511016aae9d0ac4296415aa3dcbc7db808cded21" name="gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="4a44f7a76b8ffe93ded3e037a433fd856004125ed3f31dc687e8ce372826ac3d" name="gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="9c46ee74c2b1b556d3cb05ed6207d922198ff154d3ca2f1a0554eb57b368bf70" name="gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="c1d34ec34109037dd3820f802ea59317e5658120b22e88fb18a7c4a97c6fd678" name="gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="7103567336977a7ca92f671d3cd39cce595919fa78c5c0d3af71cbfc956ccbb3" name="gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="9deba71eedd007b490d9c804e974908fc89453af0a4df2e1751d8880065c3107" name="gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="4e145ef0f18b539c4df81f05ea4fe30f649d958d874011162cb510991063bc33" name="gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="89ef15693538ad51ae3cd208f69214b0716858aadd1987169b145cb3c87e8ceb" name="gcc-objc++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="d3fd71dbc0e4a03269aaf0e0e7248e709b93bbecca8b2708f15b8e11404937aa" name="gcc-objc++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="6b27945d8618d58f1fbb57b10ecdf453f6c4ba13f0bd2b2791620b3df2f8fbdf" name="gcc-objc++" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="2d81d2f31f372482d989dacd3578b25c186e55b3f0f6a8f8d07a5ca5def1cd4a" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="1ee274ccb9f6e01421dfe0cf8cc4180152c3e4bef9b49503708165a49696a12c" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="4e6eb3db20906d75da977d1b35920ff0fb1423bd48eb7d456995e588e86d45a9" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="62776f73bcd581624cacd4133c7629e94a16a9edc33466ca7aa9f6c9598953ca" name="gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="65.oe2203sp4"/>
  <changelog author="liyancheng &lt;412998149@qq.com&gt; - 10.3.1-56" date="1717761600">- Type:BUGFIX
- ID:NA
- SUG:NA
- DESC: avoid accessing dump_file null pointer</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="5771923e4d09e9aeaf799b22c0c4f30ffd5a67f0b0dc6fe1235881db97c0ad94" name="gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="66.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-57" date="1718280000">- Type:Sync
- ID:NA
- SUG:NA
- DESC: add whitelist feature for Oneprofile</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="5c3f06407b01ece175f953e23ce545381a5ad5d79320ae3105fcd7af80d43f28" name="gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="10.3.1" rel="67.oe2203sp4"/>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-58" date="1718366400">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="eastb233 &lt;xiezhiheng@huawei.com&gt; - 10.3.1-59" date="1718452800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-60" date="1718452801">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 10.3.1-61" date="1718712000">- Type: Fix
- ID:NA
- SUG:NA
- DESC: fix typo</changelog>
  <changelog author="Mingchuan Wu &lt;wumingchuan1992@foxmail.com&gt; - 10.3.1-62" date="1718971200">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="rfwang07 &lt;wangrufeng5@huawei.com&gt; - 10.3.1-63" date="1723204800">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="wuxinghang &lt;wuxinghang@higon.cn&gt; - 10.3.1-64" date="1724328000">- Type:Sync
- ID:NA
- SUG:NA
- DESC:Sync patch from openeuler/gcc   fix spec2017/505 build issue</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-65" date="1727265600">- Type:Sync
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-66" date="1728561600">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
  <changelog author="zhenyu zhao &lt;zhaozhenyu17@huawei.com&gt; - 10.3.1-67" date="1734350400">- Type:Bugfix
- ID:NA
- SUG:NA
- DESC: Sync patch from openeuler/gcc</changelog>
</package>
<package pkgid="4c362c4652a57f065b252242ad46124ea742a5c36b4f15c9f230689ef0477427" name="gcc-toolset-14-binutils" arch="aarch64">
  <version epoch="0" ver="2.42" rel="3.oe2203sp4"/>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 2.42-1" date="1723723200">- Init binutils 2.42
- Reference: https://gitlab.com/redhat/centos-stream/rpms/binutils</changelog>
  <changelog author="Hu,Lin &lt;lin1.hu@intel.com&gt; - 2.42-2" date="1748433600">- Fix relocation issue for APX.</changelog>
  <changelog author="zhangenpei &lt;zhang.enpei@zte.com.cn&gt; - 2.42-3" date="1751457600">- Backport RVA23U64 mandatory extensions.</changelog>
</package>
<package pkgid="c1ae98be76b675d6d769b8c0acff1926ee1984b78623b0870399ec9f68bdccd5" name="gcc-toolset-14-binutils-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42" rel="3.oe2203sp4"/>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 2.42-1" date="1723723200">- Init binutils 2.42
- Reference: https://gitlab.com/redhat/centos-stream/rpms/binutils</changelog>
  <changelog author="Hu,Lin &lt;lin1.hu@intel.com&gt; - 2.42-2" date="1748433600">- Fix relocation issue for APX.</changelog>
  <changelog author="zhangenpei &lt;zhang.enpei@zte.com.cn&gt; - 2.42-3" date="1751457600">- Backport RVA23U64 mandatory extensions.</changelog>
</package>
<package pkgid="b4426de2c9856631c4e06d1cceee3dd3da61d7d5acc1afa11f7ad0099b750dcf" name="gcc-toolset-14-binutils-debugsource" arch="aarch64">
  <version epoch="0" ver="2.42" rel="3.oe2203sp4"/>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 2.42-1" date="1723723200">- Init binutils 2.42
- Reference: https://gitlab.com/redhat/centos-stream/rpms/binutils</changelog>
  <changelog author="Hu,Lin &lt;lin1.hu@intel.com&gt; - 2.42-2" date="1748433600">- Fix relocation issue for APX.</changelog>
  <changelog author="zhangenpei &lt;zhang.enpei@zte.com.cn&gt; - 2.42-3" date="1751457600">- Backport RVA23U64 mandatory extensions.</changelog>
</package>
<package pkgid="e8f6d6ac623a42d32268700eb731113075b0bf1ee337de2a07b67b582702e6ec" name="gcc-toolset-14-binutils-devel" arch="aarch64">
  <version epoch="0" ver="2.42" rel="3.oe2203sp4"/>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 2.42-1" date="1723723200">- Init binutils 2.42
- Reference: https://gitlab.com/redhat/centos-stream/rpms/binutils</changelog>
  <changelog author="Hu,Lin &lt;lin1.hu@intel.com&gt; - 2.42-2" date="1748433600">- Fix relocation issue for APX.</changelog>
  <changelog author="zhangenpei &lt;zhang.enpei@zte.com.cn&gt; - 2.42-3" date="1751457600">- Backport RVA23U64 mandatory extensions.</changelog>
</package>
<package pkgid="84aac8abe375f5d818881ed58b9ce0643fc75697380e8934905e091a4d607ac9" name="gcc-toolset-14-binutils-gold" arch="aarch64">
  <version epoch="0" ver="2.42" rel="3.oe2203sp4"/>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 2.42-1" date="1723723200">- Init binutils 2.42
- Reference: https://gitlab.com/redhat/centos-stream/rpms/binutils</changelog>
  <changelog author="Hu,Lin &lt;lin1.hu@intel.com&gt; - 2.42-2" date="1748433600">- Fix relocation issue for APX.</changelog>
  <changelog author="zhangenpei &lt;zhang.enpei@zte.com.cn&gt; - 2.42-3" date="1751457600">- Backport RVA23U64 mandatory extensions.</changelog>
</package>
<package pkgid="036c0c2393c03ee00dd3778bf253887995a7102566759faf878787f924f9ec89" name="gcc-toolset-14-c++" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="1327eb25cceba51dc2896a7fc8febecab0d49c236a67de3621349ad800ccc275" name="gcc-toolset-14-gcc" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="a1881c073a7f2efc63b605f61aa8d108652628409bbe0bce422078ec4bc030e9" name="gcc-toolset-14-gcc-debuginfo" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="ab1fe667a45ee910d6e66415b4728d469fb1ca947bb4dc3b77addbbca5e65f54" name="gcc-toolset-14-gcc-debugsource" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="07353951f780431478cbe5cb7cef177f7537b1c397991a994d7f192f2da50599" name="gcc-toolset-14-gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="3c0fcfdb0071272355bea3082b7552f4cf590dcd86414dc7413166447e1ef1d9" name="gcc-toolset-14-gfortran" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="1f19090c91944a7a1d8a4d9fa7654a24012438a4605a245bcc14f3bc5746937f" name="gcc-toolset-14-libasan" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="4493397d24c3103d612f76f3d8e4c98aa05d5178cb028d0e9308de1700ed5947" name="gcc-toolset-14-libasan-devel" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="dfe4dd59e84ef18f4ead19c05be0aee536e7b55526ab9ff6b2ae127a6ba10129" name="gcc-toolset-14-libatomic" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="030b992add280c5af35dc4c3de34e44f531552dde2febc055669b8ee37c706e7" name="gcc-toolset-14-libgcc" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="490f5be372b9da10f6db8d2774f641c18964a0060bf5ae5d50570ec518947d9a" name="gcc-toolset-14-libgccjit" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="9c58ff6aa3c7c07d93642523ff29528e60167385029398852ffddb5b5ee8bc44" name="gcc-toolset-14-libgccjit-devel" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="485ab78356eb24c4a8e97c9a4803ece25f1ed7be344b152afeb29a687ec2eaa3" name="gcc-toolset-14-libgfortran-devel" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="e7cd8e72801fda79b47a506f5cbe747115fe46088003b0019351bb64f4f52f51" name="gcc-toolset-14-libgomp" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="681516aac512e272a96db1841f133a16e2511b3a02afc91de55729a875bd4f83" name="gcc-toolset-14-libhwasan" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="7f9cddc6d411c4c37e892e732b53f25725a3a6e96d865a0013f2d569efc90dce" name="gcc-toolset-14-libhwasan-devel" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="8b802d29b00bc3afdcad7db8729385dda51cf70778fa67b59da1ff7e9a9cb418" name="gcc-toolset-14-libitm" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="417106f7c241aad9554f0a883e1e045e50c097ceb293d75e0a562aa349aad7f7" name="gcc-toolset-14-liblsan" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="adb68e011092d9e160a72bcf5e661a91cbbd43d9ac700ac673714627b5ab91af" name="gcc-toolset-14-liblsan-devel" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="e052e1f6e6d43c0b7b0ce49d40a32f98e804de0e29a0d47665100f02091fa734" name="gcc-toolset-14-libstdc++-devel" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="a26f8734b8be63fe9eb9a3da97919c02e70f72fd9562f9d3b64a202bd6847378" name="gcc-toolset-14-libtsan" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="6ea2b58516047195c44d50cb4c1f9a6d1b3eb4bebebfe1d7c9a49968ebe45e9a" name="gcc-toolset-14-libtsan-devel" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="cf69597fcb98623cdba2d7ac6c1696ee05a01eb01fd59bab62917d2d5bb9c63f" name="gcc-toolset-14-libubsan" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="2b67b5ee41687b829ab9b3b897e20d107befc9ca5f686a2c96fd1067e99e2797" name="gcc-toolset-14-libubsan-devel" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="249adb4bb8d27249abf2221df4e818f459d48120e51dd29a23c90192aba7cc64" name="gcc-toolset-14-plugin-devel" arch="aarch64">
  <version epoch="0" ver="14.3.1" rel="3.oe2203sp4"/>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-2" date="1724328000">- [Backport] Backport fix prefetchi from gcc-14.3.0</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-3" date="1724500800">- [bugfix] Change libgomp, libfortran, libgcc_s, libitm, libatomic package path
- Add gcc-toolset-14 Readme</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-4" date="1724760000">- [bugfix] Change libsupc++.a, libstdc++exp.a package path</changelog>
  <changelog author="zhaoshujian &lt;zhaoshujian@huawei.com&gt; - 14.2.1-5" date="1724846400">- Change stdc++_nonshared_48 to stdc++_nonshared_80.</changelog>
  <changelog author="YunQiang Su &lt;yunqiang@isrc.iscas.ac.cn&gt; - 14.2.1-6" date="1724846401">- Fix build on RISC-V 64.</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-7" date="1739793600">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="Hu, Lin &lt;lin1.hu@intel.com&gt; - 14.2.1-8" date="1748606400">- [Sync] Sync patches from gcc.gnu.org's releases/gcc-14</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 14.3.1-1" date="1750161600">- Update to 14.3.1</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-2" date="1753099200">- [Sync] Sync inline-force</changelog>
  <changelog author="huang-xiaoquan &lt;huangxiaoquan1@huawei.com&gt; - 14.3.1-3" date="1753185600">- [Sync] Sync hip09</changelog>
</package>
<package pkgid="b84ee9a00cf22b972862a0d7143a9157f6768ac18c28a03f78e046cb56a90083" name="gdb" arch="aarch64">
  <version epoch="0" ver="11.1" rel="10.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-9" date="1718193600">- modify gdb-help package's license GFDL to GFDL-1.3-or-later</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-10" date="1752494400">- fix CVE-2022-48064</changelog>
</package>
<package pkgid="058f98ce4f2683c3cb9380424da72a1d6b2551248decd92a9ac9b30ee188fcfe" name="gdb-debuginfo" arch="aarch64">
  <version epoch="0" ver="11.1" rel="10.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-9" date="1718193600">- modify gdb-help package's license GFDL to GFDL-1.3-or-later</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-10" date="1752494400">- fix CVE-2022-48064</changelog>
</package>
<package pkgid="cb93f6dd0a4393fee17ea6b6a0eed34123515689deecde0c85ed679488666d04" name="gdb-debugsource" arch="aarch64">
  <version epoch="0" ver="11.1" rel="10.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-9" date="1718193600">- modify gdb-help package's license GFDL to GFDL-1.3-or-later</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-10" date="1752494400">- fix CVE-2022-48064</changelog>
</package>
<package pkgid="c506271fb8136c5a910f45b25e67e8823a5cad7a1a561a68e0e530bad9b8534a" name="gdb-gdbserver" arch="aarch64">
  <version epoch="0" ver="11.1" rel="10.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-9" date="1718193600">- modify gdb-help package's license GFDL to GFDL-1.3-or-later</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-10" date="1752494400">- fix CVE-2022-48064</changelog>
</package>
<package pkgid="8db9511b0b27c5be8539253260bad14884de3b760e6270a0212dc07a182b1e65" name="gdb-headless" arch="aarch64">
  <version epoch="0" ver="11.1" rel="10.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-9" date="1718193600">- modify gdb-help package's license GFDL to GFDL-1.3-or-later</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-10" date="1752494400">- fix CVE-2022-48064</changelog>
</package>
<package pkgid="2a9829581f778a972c3cdc49471519bc00bec4a60925e55d01e6049987da41ce" name="gdb-help" arch="noarch">
  <version epoch="0" ver="11.1" rel="10.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-5" date="1693656000">- fix CVE-2023-39128</changelog>
  <changelog author="Liu Chao &lt;liuchao173@huawei.com&gt; - 11.1-6" date="1693828800">- correct patch's commit message</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-7" date="1697112000">- fix CVE-2023-39129</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 11.1-8" date="1700654400">- fix CVE-2023-39130</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-9" date="1718193600">- modify gdb-help package's license GFDL to GFDL-1.3-or-later</changelog>
  <changelog author="wangxiao &lt;wangxiao184@h-partners.com&gt; - 11.1-10" date="1752494400">- fix CVE-2022-48064</changelog>
</package>
<package pkgid="70530a37f47d86f549be0ed2606f5e2a400b051ea353bbf8c4931ec4d64c766d" name="gdisk" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="4.oe2203sp4"/>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1.0.8-3" date="1667044800">- remove stray debugging code</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; - 1.0.8-4" date="1727179200">- DESC: fix problem that caused sgdisk to crash when using the latest popt</changelog>
</package>
<package pkgid="761cd32fb27e18d2267d4979f5d1562c003bec83e1ca2d4495e4c8ddd2226543" name="gdisk-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="4.oe2203sp4"/>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1.0.8-3" date="1667044800">- remove stray debugging code</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; - 1.0.8-4" date="1727179200">- DESC: fix problem that caused sgdisk to crash when using the latest popt</changelog>
</package>
<package pkgid="7913395c6ddf865066c450ba421214b4cc8061d0d3c95c6d40095a8b027bdff2" name="gdisk-debugsource" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="4.oe2203sp4"/>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1.0.8-3" date="1667044800">- remove stray debugging code</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; - 1.0.8-4" date="1727179200">- DESC: fix problem that caused sgdisk to crash when using the latest popt</changelog>
</package>
<package pkgid="21e112c03910faf2be825e700cc886f84c447ec36e3f538ec6ac68cff8e6ad64" name="gdisk-help" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="4.oe2203sp4"/>
  <changelog author="wangzhiqiang &lt;wangzhiqiang95@huawei.com&gt; - 1.0.8-3" date="1667044800">- remove stray debugging code</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; - 1.0.8-4" date="1727179200">- DESC: fix problem that caused sgdisk to crash when using the latest popt</changelog>
</package>
<package pkgid="79d486682a2130aae53dd3a890a990de0fe2a9ed65db746da10df548247df6a0" name="gdk-pixbuf2" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp4"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="8fb18177e11d88074908390b0c00d195618a5dc133c5d50078655ce21895cd90" name="gdk-pixbuf2" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="8.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
</package>
<package pkgid="84b70331e86d9da9433ac0af2b80efe8b41a32ac0b848427be7fefeca6531b05" name="gdk-pixbuf2" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="9.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
  <changelog author="kouwenqi &lt;kouwenqi@kylinos.cn&gt; - 2.42.6-9" date="1752494400">- fix CVE-2025-7345</changelog>
</package>
<package pkgid="27a62be03495f83e99ccb604774000c5c871a78bf347f8a231de63fbe5a6e959" name="gdk-pixbuf2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp4"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="27641140c9df034a7b9df25d7b54e9c4ed1a87bf5a8b2ade4b0ba3ee3e4959a7" name="gdk-pixbuf2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="8.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
</package>
<package pkgid="6fa147c0f124c871e827b4beda500ff7c437dbd9380492e06c1684e3904e66c0" name="gdk-pixbuf2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="9.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
  <changelog author="kouwenqi &lt;kouwenqi@kylinos.cn&gt; - 2.42.6-9" date="1752494400">- fix CVE-2025-7345</changelog>
</package>
<package pkgid="fbd18f3ef6539e2df85dae232c3fa78eda86bac3e18d73af13e974aada9d29ce" name="gdk-pixbuf2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp4"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="f074d6251aec3aa5ac77a4dcb7ae714eb253f3371de956c3f7d7b339c0ab8a3b" name="gdk-pixbuf2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="8.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
</package>
<package pkgid="de46a2bfee9cef6169783ffb657fe0215e3d79a8d63a8e575528fd43da8bdc28" name="gdk-pixbuf2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="9.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
  <changelog author="kouwenqi &lt;kouwenqi@kylinos.cn&gt; - 2.42.6-9" date="1752494400">- fix CVE-2025-7345</changelog>
</package>
<package pkgid="2962fbd3c7e70ed3325e3836dbc597f0c32186a37a4b67d1449ca256ebd0e1c0" name="gdk-pixbuf2-devel" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp4"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="cdb0af86cacd3ded3d72331b8575bcba8a59ff188285cfe0ed5be950a0addf1c" name="gdk-pixbuf2-devel" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="8.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
</package>
<package pkgid="5042e75220a57fec6990ee568b296dd0230627870b18d03d4ace4e0a9f449653" name="gdk-pixbuf2-devel" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="9.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
  <changelog author="kouwenqi &lt;kouwenqi@kylinos.cn&gt; - 2.42.6-9" date="1752494400">- fix CVE-2025-7345</changelog>
</package>
<package pkgid="8dbea1fc7cc4f3acd35eba791c14491cfaa8b92a4d72cbb9b2bb47a4689156aa" name="gdk-pixbuf2-help" arch="noarch">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp4"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="01bf0b44d52396e6e7a625b3f3ca9b36653e0f79476393d512823a6f72a940ba" name="gdk-pixbuf2-help" arch="noarch">
  <version epoch="0" ver="2.42.6" rel="8.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
</package>
<package pkgid="02e05c9bafddd2f6f76782dc229f658c2a341ffe5dae018b6e193712134f3f0c" name="gdk-pixbuf2-help" arch="noarch">
  <version epoch="0" ver="2.42.6" rel="9.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
  <changelog author="kouwenqi &lt;kouwenqi@kylinos.cn&gt; - 2.42.6-9" date="1752494400">- fix CVE-2025-7345</changelog>
</package>
<package pkgid="0e0780c8ec4457713c17dae2b1821ba412c54d5da63a0db1169e4ef42ad3d5da" name="gdk-pixbuf2-modules" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp4"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="6385762bd4339b649df4b2496a6680df876d45fe2a8464343a53ba518694374d" name="gdk-pixbuf2-modules" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="8.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
</package>
<package pkgid="2fff162c26d03a196ff552db02e1afa201a819d647e5bf35aa890683f831294b" name="gdk-pixbuf2-modules" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="9.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
  <changelog author="kouwenqi &lt;kouwenqi@kylinos.cn&gt; - 2.42.6-9" date="1752494400">- fix CVE-2025-7345</changelog>
</package>
<package pkgid="12c170bae843cf1d9199ccfa979f3ad6834a24caf100c39312f2708c36606828" name="gdk-pixbuf2-tests" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="7.oe2203sp4"/>
  <changelog author="wangkerong &lt;wangkerong@h-partners.com&gt; - 2.42.6-4" date="1661428800">- fix CVE-2021-46829</changelog>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 2.42.6-5" date="1669896000">- disable make check</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
</package>
<package pkgid="924349aaa9b9f1b9250cc86471f96d14a7f790fb46ce8049f4902a8c0e30eaee" name="gdk-pixbuf2-tests" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="8.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.42.6-6" date="1687262400">- fix CVE-2021-44648</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
</package>
<package pkgid="0d64d97e257699a8c6b4c027a8e5865352728a6b20afa53f6769a924f2b1d399" name="gdk-pixbuf2-tests" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="9.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.42.6-7" date="1719403200">- Fix CVE-2022-48622</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.42.6-8" date="1750248000">- fix CVE-2025-6199</changelog>
  <changelog author="kouwenqi &lt;kouwenqi@kylinos.cn&gt; - 2.42.6-9" date="1752494400">- fix CVE-2025-7345</changelog>
</package>
<package pkgid="cd007cad600ec9e1c0faea799ec8f114f23d8383d1d414069add422c0dfae87e" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="11.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="a14f3c3fd1c17ec1a5ae1d8c05419d0b6075c6627de5cd241cd25caf2b294325" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="14.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
</package>
<package pkgid="7e1f51f249e0610a52d44ce16ee136392fd745eb962034b49c5f5e6f5f1a20a5" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="17.oe2203sp4"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="36b06de94f802b5657e448d1506498798f4979f985506ccca3c5c03bc0a5f2df" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="19.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
</package>
<package pkgid="358e34897f22c6aa86836ec8a405c5562885fdc96e8d550d15bfe16c03d1b4ad" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="20.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
</package>
<package pkgid="27d216996872a639551d6402c2251079f8eec4aa03e438ddb347144f74a7ebf9" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="21.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-21" date="1748001600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-48708</changelog>
</package>
<package pkgid="7897099cde3015bdaa8812669c45b506868e8ae996a82c64839eb8f6cdb585fe" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="11.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="de22b1a341d49e96f716a7adf1f53f816b9a8e8ec856229d773d0ac1147c7649" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="14.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
</package>
<package pkgid="bd97294216ce4ec9f300c1c134078579600ce36de1468bcea9e1b0535612910c" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="17.oe2203sp4"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="3f6c19f73da3ef05341a9c456bcf61419adc4e913d6ce62520a58ecaf12a92ce" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="19.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
</package>
<package pkgid="4d19e019717f05f2a8a3784969604a7c0941d65b1152e612eb5ac0e193154429" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="20.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
</package>
<package pkgid="3df4b4e46db9e1008b2ca87e6a548b335dbb451c7f531841086f7c67810d159a" name="ghostscript-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="21.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-21" date="1748001600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-48708</changelog>
</package>
<package pkgid="c39bc0e70836f892d216737fbdd68db354b6c92f9a4e362945852ad58f6a782f" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="11.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="9ff0e4205e20c07c152f493ec4f62a9ff744df36173ac0964f13652d85e7ee09" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="14.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
</package>
<package pkgid="0469f01f36277ad1309fdc208ca9d31b5e40fd0ea81afcd185db241daebf6c5c" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="17.oe2203sp4"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="669c1985c69c990f46d73a0fa7172c7b19611f5ee75c1e45e4bc82d13f0e330d" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="19.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
</package>
<package pkgid="49ef811fa08d4b44efd5c03fc24a9253c03aef501654525a7d5c287d860215e6" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="20.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
</package>
<package pkgid="78645ad3c3cd5526f71b8494dd7fe7e4f312d368d48cdaff0805cac17c265294" name="ghostscript-debugsource" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="21.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-21" date="1748001600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-48708</changelog>
</package>
<package pkgid="8d44dc1d0fcb35fe4fb0ab6ae5792b06c172fdc55adca76020d9a3e9e22edc05" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="11.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="5c901f8f8644fc823e74d722dfef00c00b43ac1e882a15abd9e839922c17ead6" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="14.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
</package>
<package pkgid="c08cfd419d4bb41ebd7a90833c4756c5688f65a8627e4eaa7ee480091a075552" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="17.oe2203sp4"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="7d3430184e13d4724e205edc161c92d013cfad7116a3bba747e639cb7abf8101" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="19.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
</package>
<package pkgid="8c9e31fc5cb8d088ae25de115b501fcbf05c3305426302fb7533ba43d3c86e88" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="20.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
</package>
<package pkgid="2506d05afa73dcd8ab64f38193b471bee27ede56f17ea2191abf1e53a592f5ae" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="21.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-21" date="1748001600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-48708</changelog>
</package>
<package pkgid="102fca1a0317bbd7c4496a62f130d9a095bcf87b37ccbeeb381e5f9fc3c81cbc" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="11.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="d6b6e7e7bdea2ff2bf83a742953cc210417925ab268749632e26332aa2df5a2c" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="14.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
</package>
<package pkgid="7887d1327bcde96cda84e44543b74c2d59175b75b36b31520a1e38a57b3907a7" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="17.oe2203sp4"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="dd81e364ca65f236ebfa72824db6a6f7d0082c30dfb316c73320e60403e3d6aa" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="19.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
</package>
<package pkgid="2d202f6d8463d3a34b95a072d22c5a80cc966f29c0fc46de92e4095a7a044e48" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="20.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
</package>
<package pkgid="99bde633d1af5cfdbd47041a88177a7697fa4effa12ec0dc3694bdad18bfcaee" name="ghostscript-help" arch="noarch">
  <version epoch="0" ver="9.55.0" rel="21.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-21" date="1748001600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-48708</changelog>
</package>
<package pkgid="3395b4b4038708e1ae0be382e70e82bbe622f4ab13281a08690f4f57977322cf" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="11.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-3" date="1692100800">- fix CVE-2023-38559</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-4" date="1692878400">- fix CVE-2023-28879</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
</package>
<package pkgid="a22e3f659ab6d592fdd2f4993731857241111f2ea3fa5b47052aab948486f977" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="14.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-5" date="1694001600">- fix CVE-2023-36664</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-6" date="1695384000">- Type:CVE
- ID:CVE-2023-43115
- SUG:NA
- DESC:fix CVE-2023-43115</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-7" date="1703505600">- Type:CVE
- ID:CVE-2023-46751
- SUG:NA
- DESC:fix CVE-2023-46751</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
</package>
<package pkgid="6e02e08593937f6c9e55515b183bcd0c2482ec008a7327e5ddd543023eb14bb1" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="17.oe2203sp4"/>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-8" date="1714996800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2023-52722</changelog>
  <changelog author="xuchenchen &lt;xuchenchen@kylinos.cn&gt; - 9.55.0-9" date="1716724800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29510 CVE-2024-33869 CVE-2024-33870</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
</package>
<package pkgid="ad19c073868fb4869b8441f77d4e51bb04d78ebcc4f8be613c58792251c7a4f2" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="19.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-10" date="1720094400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-29506 CVE-2024-29507 CVE-2024-29508 CVE-2024-29509 CVE-2024-29511</changelog>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
</package>
<package pkgid="d292901feb4f36ed60d170a00ce170d47ca811063f15bc93da33fe541b75c8cd" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="20.oe2203sp4"/>
  <changelog author="zhangxianting &lt;zhangxianting@uniontech.com&gt; - 9.55.0-11" date="1720785600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: This is the second part of the fix for CVE-2024-29511</changelog>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
</package>
<package pkgid="f19c6e5dd5f31c1b7317c2df025bc2c43e2e4d412f484286e947ebfb51942fec" name="ghostscript-tools-dvipdf" arch="aarch64">
  <version epoch="0" ver="9.55.0" rel="21.oe2203sp4"/>
  <changelog author="dillon chen &lt;dillon.chen@gmail.com&gt; - 9.55.0-12" date="1727179200">- Type:CVE
- ID:NA
- SUG:NA
- DECS: fix CVE-2024-33871</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-13" date="1729857600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46953</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-14" date="1729857601">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46956</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-15" date="1730289600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46955</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-16" date="1730462400">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46951</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 9.55.0-17" date="1730808000">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2024-46952</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-18" date="1743076800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836</changelog>
  <changelog author="hdliu &lt;dev03108@linx-info.com&gt; - 9.55.0-19" date="1743422400">- Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-20" date="1743508800">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-27831</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 9.55.0-21" date="1748001600">- Type:CVE
- ID:NA
- SUG:NA
- DECS: Fix CVE-2025-48708</changelog>
</package>
<package pkgid="0bf0aad409ede418dc22f63cbd8dc8f37fd676710a56c60b2280d231e45e0220" name="giflib" arch="aarch64">
  <version epoch="0" ver="5.2.2" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.2.2-1" date="1718971200">- Update to 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.2-2" date="1734436800">- Fix heap-buffer overflow</changelog>
</package>
<package pkgid="643ef16a8f8b3797e0b960f61c7126af70a4c1c57c9b363bde49e40dd7ef34c3" name="giflib-devel" arch="aarch64">
  <version epoch="0" ver="5.2.2" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.2.2-1" date="1718971200">- Update to 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.2-2" date="1734436800">- Fix heap-buffer overflow</changelog>
</package>
<package pkgid="5050843b9d47a434bf6f0d9bcd4da22b50b43f351509ea2e2b02a1ce8dab07e5" name="giflib-help" arch="noarch">
  <version epoch="0" ver="5.2.2" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.2.2-1" date="1718971200">- Update to 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.2-2" date="1734436800">- Fix heap-buffer overflow</changelog>
</package>
<package pkgid="6d3098c4b95f101989036d4a3b1519b98d90e47957543c528a8c7f6daf5e117b" name="giflib-utils" arch="aarch64">
  <version epoch="0" ver="5.2.2" rel="2.oe2203sp4"/>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 5.2.1-7" date="1694779200">- Fix CVE-2023-39742</changelog>
  <changelog author="liwenjie &lt;liwenjie@kylinos.cn&gt; - 5.2.1-8" date="1715688000">- Fix CVE-2021-40633</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 5.2.2-1" date="1718971200">- Update to 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 5.2.2-2" date="1734436800">- Fix heap-buffer overflow</changelog>
</package>
<package pkgid="2d09e69c7e21fc3f0a9d92c0c535ca4eaedeb8eacb6be658df2febe38c90b823" name="git" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="60944268be853ff9bc9c484381e3865da128ae1db362bf2fdb9855efa4b58d6b" name="git" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="0fe8533d4ad90c7443e0489b5c6d7ed03429b077ffece2dfed9546ec965a63a8" name="git" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="1cc8dc2745069d1134868a0e0e72625cd453d59837002fdd46dd63200133a4f7" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="cf6a6936a8c905eaa3c0910f02d0ee1a11f12bc8bca9f42cfe6458a24156060b" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="3a7ab45d0542ee779fd398e334e6af2e656b4cc40c6c3014666ce25901dcb2ab" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="c728b7bbde18ff2d71159ed7c7a28962b63a050f0c4f6db8e1cddf32c6e10d24" name="git-daemon" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="2a4aec17417de8b5806865e81725a62abb5122c8f3eb198a1d75989b3dcd259a" name="git-daemon" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="1c08f118cea6941faf24acbb33ed4882173e93e92dfdfe40081b61fe0059a7fc" name="git-daemon" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="e0db639b90c047f46a04185a07d583059414623bdb81ea0eb324f1a54c5fe75d" name="git-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="b1dfc55f2fe62844c84d6be540e545e401eead2d6ad45407e9ee700e085d2bdc" name="git-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="7a87c1514b0229a4a1df431f3ba89c60ddb951d305d9d9f7630aa738d8abcbe3" name="git-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="6d5f452dafe9854765850c1a54d502c5d7974b587d592a6876bc89e3695ce5c7" name="git-debugsource" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="e4013edc7c45ca58cb97505f601ad2238be78e8e48de88c3c322a84265af3d4a" name="git-debugsource" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="d0cf87e34cb6925d8daebb3fa2b7cebdd2649db36c8cdd5eeedbbdddcee327db" name="git-debugsource" arch="aarch64">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="b189fa0b6c7ed2a9eb6a0556482410f98ce52ad92a339554917e68b1fe1e310a" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="0df23dc21bbe00969d45b03975bb48dbfcd33a627a4bc8aadd5852924266f06a" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="29f1f13913b8a145055e79a9cc1d9dcd8cb1ba89009bd691e1ebb386ba365999" name="git-email" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="90e2597bd231863c11a6d25bf13358028022a76ee23c479bcb471f9f1e8dd4a2" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="76f4c54f8f353f1488b39867e9b5c3498939b5ac0731e8e7020b5c2b5f3dcf62" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="de5063b9b9db496b5c9e36dbefac1c09b18c258a8fc33ffc0c361f8557412260" name="git-gui" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="608717baa05cc92ec8f832cb3c6c37cc397975b7e5cda72dea62ed18012b7620" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="fb9ede0aa219d19962a55168f8ce61b6dd9290687be11e9b14dc731ecdde5aaf" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="231241d4f3e63406cffee04a30d7c69a5cdb5f8dba3d4a7a155fff03aed60662" name="git-help" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="81e4315808cb9c45f0c71791bf5efe74d6be91b6ae22adf091340c0659331cc5" name="git-lfs" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="1.oe2203sp4"/>
</package>
<package pkgid="0432874273d17268041c0b592534b4dbda645972204a41938847bdabcbd12b94" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="b7878ceca2d42d1d81b51d4791124699ddc90d38f53ba2392a1a9197ad1f8a95" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="b74aa2f11eeb6f549c3ec6a6e61b86b9925b1b00e4fb19a8f677c5620e3b5475" name="git-svn" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="219797f4fee8f9d082fadd5458fcdc109656ebcce1248f834ec4adda578c1221" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="b41b08aec56916484a99015bb19a37588f02f807e1e6f76da38d4d4fc40768d7" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="b8afaa83e91e83d7635819396fdd494263e0ce2dca5b029d80d07894c342ae5f" name="git-web" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="531080dc80e28843de333d87a03f408fc19f09eeccbe4ddfc8d6a67b723d0ff5" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="17.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-8" date="1675166400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Modify parameter in backport-CVE-2022-23521-attr-fix-silently-splitting-up-lines-longer-than-204.patch</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-9" date="1676462400">- Type:CVE
- ID:CVE-2023-22490 CVE-2023-23946
- SUG:NA
- DESC:Fix CVE-2023-22490 CVE-2023-23946</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-10" date="1682510400">- Type:CVE
- ID:CVE-2023-25652 CVE-2023-29007 CVE-2023-25815
- SUG:NA
- DESC:Fix CVE-2023-25652 CVE-2023-29007 CVE-2023-25815</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-11" date="1682596800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:enable multithreading compilation and installation,
       move Git.3pm.gz to perl-Git,avoid installation conflicts,
       change BuildRequires from pcre-devel to pcre2-devel.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-12" date="1684324800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix duplicate files in git primary package and subpackage</changelog>
  <changelog author="huyubiao &lt;huyubiao@huawei.com&gt; - 2.33.0-13" date="1688731200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Specifying Obsoletes and Provides version numbers, prevent upgrade conflicts.
       Delete git-core-doc from git, git-core-doc is provided by git-help.</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
</package>
<package pkgid="b03dbdddffd7564908c5ce10b6bec43775c49bb3b55c6b77309d3cf1260b2a0a" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="19.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="4d43c0dc23ebde6732f0be5b11e4b88cac60e89bf72fb79337a2857f68929be0" name="gitk" arch="noarch">
  <version epoch="0" ver="2.33.0" rel="20.oe2203sp4"/>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-14" date="1715860800">- Type:CVE
- ID:CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465
- SUG:NA
- DESC:Fix CVE-2024-32021 CVE-2024-32004 CVE-2024-32020 CVE-2024-32465</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-15" date="1716206400">- Type:CVE
- ID:CVE-2024-32002
- SUG:NA
- DESC:Fix CVE-2024-32002</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-16" date="1736942400">- Type:CVE
- ID:CVE-2024-50349 CVE-2024-52006
- SUG:NA
- DESC:Fix CVE-2024-50349 CVE-2024-52006</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-17" date="1737115200">- Type:CVE
- ID:CVE-2024-52005
- SUG:NA
- DESC:Fix CVE-2024-52005</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-18" date="1752062400">- Type:CVE
- ID:CVE-2025-48384 CVE-2025-48386
- SUG:NA
- DESC:Fix CVE-2025-48384 CVE-2025-48386</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-19" date="1752494400">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA 
- DESC:Fix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 2.33.0-20" date="1753185600">- Type:CVE
- ID:CVE-2025-27613 CVE-2025-46334 CVE-2025-46835
- SUG:NA
- DESC:refix CVE-2025-27613 CVE-2025-46334 CVE-2025-46835</changelog>
</package>
<package pkgid="1500a27bc440eb3d6b70fc7fabda6839084be8e1868128e90b486b8f0307d0ec" name="glib2" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="19.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
</package>
<package pkgid="d51a54d48a112de47fe8f81a2cba04a8efb46923824c9451062a2a8df94ef639" name="glib2" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="21.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
</package>
<package pkgid="e048503c10c8d1a256d2c85ac10d7576f781fa55f9e2586265d68d45d939d769" name="glib2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="19.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
</package>
<package pkgid="abbf7e286eb3890128980b7a9c0ca0c02cf16eca19b626108019d3bc84596ccf" name="glib2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="21.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
</package>
<package pkgid="448e239773aa13b62b9c2108ad874ecf2c5952125f8327540317e88541df0d23" name="glib2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="19.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
</package>
<package pkgid="b44b89aef20a6a3b4cc0fb5dbfcbabf0d5e2d7d4c896cad86ae7f955ab4faf15" name="glib2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="21.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
</package>
<package pkgid="6377be2287f9c66a169fb688e42d34d709f9202540ac6e7134c129b249f177c3" name="glib2-devel" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="19.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
</package>
<package pkgid="b8956dc5d48436474388c648e9e08ed87671962ad004336c8b1aa62981d6645e" name="glib2-devel" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="21.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
</package>
<package pkgid="deee1ce256ea542bb0f56f208d734a741a443e87f45cda365cdcb4d392260ffc" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="19.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
</package>
<package pkgid="8bde09c0c99b848a934731cea27ef60154380a90971737c056bfd80dccdab71f" name="glib2-help" arch="noarch">
  <version epoch="0" ver="2.72.2" rel="21.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
</package>
<package pkgid="2478e2b86c079b1ff09a40305306e0279b3cdf9360abc8084e07cf004cd0c66d" name="glib2-static" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="19.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
</package>
<package pkgid="11bb4effaed960fd2dc04fed213cb9a227fd592095a596d59a26d314595cefef" name="glib2-static" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="21.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
</package>
<package pkgid="b0215bf465888d4d0bb4e3f2f1957b1f44c493042689f6f05194a27b83808049" name="glib2-tests" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="19.oe2203sp4"/>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-10" date="1680350400">- fix CVE-2023-24593 and CVE-2023-25180</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-11" date="1692446400">- fix double unref and fix group comment management</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
</package>
<package pkgid="775d646edc75aa064393b9cf24f87a66d7b54e90051e357d4c81f9e4e2d35572" name="glib2-tests" arch="aarch64">
  <version epoch="0" ver="2.72.2" rel="21.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-12" date="1695643200">- glocalfilemonitor: Avoid file monitor destruction from event thread</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-13" date="1704974400">- fix pcre2 error , memory leak and log domains error</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-14" date="1708344000">- disable sysprof</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-15" date="1718712000">- fix CVE-2024-34397</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-16" date="1729339200">- fix memory leak, xdg error, gdbus arg0 error</changelog>
  <changelog author="litenglong &lt;litenglong@kylinos.cn&gt; - 2.72.2-17" date="1729771200">- fix filesystem type ext err</changelog>
  <changelog author="GuoCe &lt;guoce@kylinos.cn&gt; - 2.72.2-18" date="1730116800">- Correct translation information</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.72.2-19" date="1731412800">- Fix CVE-2024-52533</changelog>
  <changelog author="hanhuihui &lt;hanhuihui5@huawei.com&gt; - 2.72.2-20" date="1746619200">- fix CVE-2025-4056</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.72.2-21" date="1746878400">- fix CVE-2025-3360, CVE-2025-4373</changelog>
</package>
<package pkgid="38b4de7fa9b760e43023f062cb814a5116926bf132d42a9d66a6ec842ec04a13" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="482716a6efcab749fbc2495fee750f0758944f8cd2a4730ac6b47569aebc63c2" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="f029ae7917f117bbfcf2c67b3cc1ab734597d7d8847bf5d5a1da24e65862bd63" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="f5b900b8f1a4808f97455f0c41be02063226ee3eaeeff763ac363413a58f1866" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="9a2a65d4e24860fc998a2f9f09164c3e82e20f42d0d13b1cabc680e0ab62023f" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="a8819fe978c8f3b367059ca91055f4bfd366a74e9895c983ddf2c2a8066f2184" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="d28590988677308a5a4099688df2b21bf51f96f1100e272941e48d9f00259211" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="2d4ea983a19ca78cae8941d7e34197a7b3d96f6f66e61aaf65700f5658e18ac2" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="fd07038d94a694eed220d149159db037e2ef923afff79cf53b5ed11ecc73c466" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="1d3f480efdb1e538a71e53d7e5255ecc6a0bc4098e469863dcb531c2f2806585" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="aa510f7ddd00758ac6002b1f4a48cb0e43ed5a3694c22bbdd33c9ff8d6a72820" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="cc1f24d3123e4a2344eb510be2422ce3eeca196865361406772494001c50e970" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="28d5c5595f9a02fe1fbf55f7fee93f68b048bd0c53300f1503c2ee7527844a9a" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="c823829c116746aa2d00b0c92e09dd119c4bd59e4c7b80d575f3092e5fd7e19a" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="77619ec8690e42551055f0b921c1bcc70524b5aa3f770602b473a04542fd976e" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="f9c878df3d5e4f4cb9cf02a9615b9f7a6063b44b353062fa4e757fb719db0b0e" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="64d1493fddb0a98d3719a466f0c89fcfe6664ca299cfffae6c0b5e03c83057ad" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="89a53045b4e66a7035aefc1a28b1535e9d502a639ec0890f5a584769e8dfcbab" name="glibc-all-langpacks" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="3ea526f741975c44678ebe7ccc5bdada6a3d7e40a78cf99a71ad91951a2013c9" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="ab4d3f7afc4b796b5eec103618ce97078a188fbf024c4c98ccd2e41bcf1a29b9" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="16bb8250b940d36342f5880c14ec7c51e5264221a0d9124bf267bebd9bacd5bf" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="4be2f06db60784f1a8ff4734d4e9c20809df7f82d69e55173a5b5c4b262cd125" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="ad08660a16df80eac8662a2554901c5f46f9622d79c992007f65bf29b4fd24ff" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="f1fe61fc1189c41a137ffb5fb070bcf1059425a8dd2059dd51c7bff3ea92531a" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="445baeed231288f5e77e6544b9c2ce5d97c9564452339152f51734737823f013" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="9b8029144860c84d12df68098ec077ae579a130de958a1e4579388aef3df2725" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="e277fa0a343e9d10ea69bc62a34f28e36110a93db304a92eb0034ba3c2bd919a" name="glibc-common" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="0d20146408e3bf4da7ae8d70819c45edaef4f5a025633f6aa31684c3acf79047" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="86fe77fd2cbdfeda4d2b3af4988ae8cfd6ce2fef7afc94b7fb7bec02bf730a4a" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="44d5c23e1e2319bce050b3977cba53f9c43f3d511366ef24167b82b812edc18f" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="10844bdc85d6f3cf8952ffe882fb9c3655ecc89347bfa08a0e3127900e0a9ea8" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="ee7a07b6b69edd8498050a683d92d2692344d93d45232971f8754fc36ed3eec8" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="ca53e95486ae1159a0f2870c2bb64ff067e63925f7edd8885e8f7b25d1ff9e67" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="e6744c8f688a15678bf86c9cba546edd9e8d2d5b1d9960da585780193468b383" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="f9346a4bd22bb7cf72f368a79b006316559956d871794d52fc11b81d0d157c2a" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="5f6b9626966e33fb41ce7e7b9eeea3a77186220cc0c695f810788aeafab4aa47" name="glibc-compat-2.17" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="9265d8a676c287989fe846575de5deb449511ff5ff1cb23df8684726b12531ba" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="e317bcd418fc95cf14c343841ef836cdea0cb352d56c5d71ae9d025c11beaee8" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="09126b916717de317783136e3f4a7c9c9c40f674853c3bc4cb7a2ee64b587f1b" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="63c9ef535b3ed95fb4294d7cd10a909dfe1eebd511b5e6acb2149c0626bcba7b" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="f25a64a0769e6de16b38ecd223057f258b89c92859b526d66fc73847ca0ec388" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="e890581f5d0d5812b887f506d441c246efeb2d0ea2707a8ea81cba974736c008" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="25be256dff913ce24946a3909f8a6b1908c53c1877768753cabd2e24498d180f" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="2118ec444546ba0ffab9531d47f084ad374debfac441ac6230fe8b13d9d76292" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="fd12302d8e759937e86b7625d6baa559513f4ffc4d0a3efccdbe3b3ac103084f" name="glibc-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="b98d6731e11da8d955d1f57b1b5bd86fc4e1a3a50b1e85e00105f9a132b60a45" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="51a326c6df7cb291b1220f7ec50975b919dd8e532da4d9f31f477145aee4ff62" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="619f39f69f375803244841657b39dfa0a2de715fccd8d067a32c12b8931bf636" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="9c8e0c74fef95ed643e334290f4b5fe331f905f46fe7e58324a7fdd84caabdbc" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="3b1e3549737431c2d1173e83f81551d9c270d680a188f4bd91dac64534e7fe81" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="0ed2884db3b67268bee017b4b8d7770ab436632ea070ac2b5be5ccd10fbd9646" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="b542e478b4a5b4f0b68a3b9ec3a4e696cf9b3dcdac5b8956da4a593e33a3d0ff" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="1f1fcdffe13a30a6986ff4dfb63b4955b0e2d98552ff263eab093d566417c0af" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="9094bba2edd6acdbc105451b5d0755c15ddd0f8883a8df49dc10115aa4b86435" name="glibc-debugsource" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="7cc11dadfd4dca3358b2ceadd0f3c031faa320f05152c83ee44376c95ca31f15" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="dab135edb30a7b249e1989de09834d140bb1a8f7bdb96bc896cf4a5f71f2fda7" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="2ee586e5c9a1e4ec179b83c230b7d19b9d8c181250ca2ec38801714193dd590c" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="68c3b39ce1bbf8388fdba11dd0ff61b48fc17572cfbad035975315dd7756f6c0" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="25e4b1c73b976dd98e71180a058da2efadfdea9ee05b6fd92018b0497be5a04b" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="27c8c69853e5b59e9208c716dcafb45ce168d6186034c3a936412119b7efa066" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="b911d62771de49950e8b248347bdae2bfcc67c4f32621b9445eeb84a928dfb83" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="46cb7646a04274acc13a9cdd8377b7c2e7e90ba20e0762738fa5e0f3f1390dbd" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="774cf26af54da7e1ce01ad4996a893d898a8db56addba09b7b986ce9802a3f9e" name="glibc-debugutils" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="16ced1c42afcc2654da312457901112e0ba3f2aabca4e483b86701e301786f9d" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="87eefbd4a0c220bf3114fff8b2ddf94b1dde52ad100770a6fc0cf5ca136a3757" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="8013fce387190d7e2c1a7f344049715c9e47a2bc655e32449d8dbbe461d9250a" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="6fff3826ff76ccc7a92c1053461a6ddf79adb0b7ab38a9168044217ec349ce7f" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="d113b6e3c11f30e837027dec60cb94f29aafc9eea155c16f2f5586e7cfe2f454" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="2b7963dc249faf226cf3809bcc4becc2f02faffdca44e5d990d565ffec895b79" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="38a23609a9c8b62001dc463bf0d63eb14c142ad1bb0e968e1365e4ee9f1acac5" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="3bba1f3cf43698ba9e6c059c5a48641f787af17d9d3993dddca176e3aed46c89" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="a23ed1c0139a9f712cd858c19ffe46823d927bab1e7a1b13c5aebdca84ffb6e4" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="f14f2e2bbfc59ed29f84d5d2f72a5fe487bc292a85ff551ed4972f5f43dbeeb6" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="dffc65b31a0c75f5a9aa89ff0597403388641edc5502d3d3988b818c91ccdc9d" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="aa4e337d4892930d278afa873ee3ee9186841e2660128101e39b4cdc49d14097" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="68970275286e248a654a2cc6d3eb41bd1e34762f5f6fd92fdc3325821ea7f740" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="375961109e6127f760d8d660ce052c0efa19b618239968df9fe01ded49c0298a" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="3b709735fff77f0f57018ac4d112c036e7d0a066310398ecb719a28a6154486c" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="d08b183fcb63c244c2b88a5a939b635dcfc407bf93048a8f332543a0a19a8dc2" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="5b3732d95698c6a6f4ec490738f6ff7062031544e8838675eca9714989533252" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="a813a6d3246c9ce4f124fa1574d241c47aca236ac202983e8958c781cf68c44c" name="glibc-help" arch="noarch">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="f2a07191d0af5864ba8d3bbbe864db5e5114637cbbaaa699600e578fabc24378" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="6261fa49539358e25998c94c170a4f0752b486f0a99eac38f3fa1a97c847adb9" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="2771b8224261aa927fd59633adda3628b4c43df6ca5ae591b953af97bd3fb1be" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="5e18adbbc0817f81acf7f9766e412548ebfe66d3c18805d47edea6813d578654" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="5edb1fcecdd223118a01bbf931fd142a3548d0125223d6f7cc23e05cff32d14d" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="30b6639191b2890383ad26506629922a0e53d240f9903e4aad52455016dc2511" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="22dedabc130d8e3bcf4113827f375d78d98263df5a8de6c8f39097c37d2d4c53" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="5ca34914cc8b09c1804c85a250e27312edf68aada8876275421bbb7ae7794c61" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="1a2b6412b903fc8396ee01783c37fff24058a53ac97e3fd652b9e5819e2ff0a0" name="glibc-locale-archive" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="b70270fcd3adfc72e6700aecb1819694539383175ed13196ecff2eba40b24d36" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="6dfeab208e8eca1fd3694c8db6624a5bb2170d29ebf13c058afdfaaef2cd82d6" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="3716b218c7e4a9a84535264b9e4a0b537ffcf0231b28dc74c55ca1e67935d467" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="280823c2fb58d10f5468dee65b49297f5f1462364fb06a21680daf7bf22ae67e" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="34650dd0ded3903953055dab72620c193f6c7eef677de7a8dcda378a2ea974d6" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="ce0672876ae65a9e512c28633fcac987b3a7fcdb4eab7d75a3c8b339053c08ba" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="2c8631d26414d0e932a770cfa66adafd20672e2af413e8d5d3fda982b0fc4ea7" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="10c13825113654d6e4a863dc022ebe30bb2d14929ab8a7db2b0cf6701f759517" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="f1876837bd3bae81414ee96c554a560e37ba4657b3bb5b1fb52cdced18ee5994" name="glibc-locale-source" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="aaf62eb89899f952788d2f79f86caaa776ea186edc8df723c8d4d0ade2bda1ab" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="156.oe2203sp4"/>
  <changelog author="Lixing &lt;lixing@loongson.cn&gt; - 2.34-147" date="1713960000">- Add missing LoongArch relocation type in elf.h</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
</package>
<package pkgid="ab7e92bc3b4b01ff246c51e46f797d082d0f801ecc14b18ff2ac15ace4ccabad" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="157.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-148" date="1714392000">- Type:CVE
- ID:CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602
- SUG:NA
- DESC:fix CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huaiwe.com&gt; - 2.34-149" date="1714996800">- Type:bugfix
- ID:
- SUG:NA
- DESC:nscd: Use errval, not errno to guide cache update
       nsce :Skip unusable entries in first pass in prune_cache</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
</package>
<package pkgid="d58e9b9e5eab32db5e275effa53d218a9c335beba104e47ee9e179cc2a72e4cf" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="159.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-150" date="1715342400">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Add TLS modid reuse test for bug 29039
       elf: Fix TLS modid reuse generation assignment
       elf: Check objname before calling fatal_error
       elf: Fix _dl_debug_vdprintf to work before self-relocation
       elf: ldconfig should skip temporary files created by package managers
       ldconfig: Fixes for skipping temporary files.</changelog>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
</package>
<package pkgid="48aaa846069c9961dd8990271909bb699e81a42a0957f4259baec1029203c724" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="160.oe2203sp4"/>
  <changelog author="hefq343 &lt;fengqing.he@shingroup.cn&gt; - 2.34-151" date="1718625600">- Type:bugfix
- ID:
- SUG:NA
- DESC:fix compile error for ppc64le</changelog>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
</package>
<package pkgid="40cd60abad4d8435a0c766b6e7691eff5e63a66e67feb508fb3248a7afdd51cc" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="161.oe2203sp4"/>
  <changelog author="chenhaixiang &lt;chenhaixiang3@huawei.com&gt; - 2.34-152" date="1719316800">- Type:bugfix
- ID:
- SUG:NA
- DESC:elf: Properly align PT_LOAD segments</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
</package>
<package pkgid="999b78347ca52fab2b396698817e64be8363cf122917522314c2afce14a8170f" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="162.oe2203sp4"/>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-153" date="1721044800">- Type:bugfix
- ID:
- SUG:NA
- DESC:Check the validity of len before mmap</changelog>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
</package>
<package pkgid="05c0acd81a4743940753f0dbe5bf21737adcd552a940e03b65de0db18b7566d3" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="163.oe2203sp4"/>
  <changelog author="zhuofeng &lt;zhuofeng2@huawei.com&gt; - 2.34-154" date="1721476800">- Type:bugfix
- ID:
- SUG:NA
- DESC:stdlib: fix grouping verification with multi-byte thousands</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-155" date="1722081600">- Type:bugfix
- ID:
- SUG:NA
- DESC:resolv:Do not wait for no existing second DNS response error</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.34-156" date="1722686400">- Type:bugfix
- ID:
- SUG:NA
- DESC:mktime: improve heuristic for ca-1986 Indiana DST</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
</package>
<package pkgid="b9f487fa07d4b35f42929a3c611615d0cc71c4ee544211e7d87b98d225374a0f" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="166.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-157" date="1724155200">- Type:bugfix
- ID:
- SUG:NA
- DESC:enable shared library use huge page for aarch64 architecture
       revert "elf/ld.so: use special mmap for hugepage to get symbols"
       hugepageedit: static-link build
       elf: the hugepage feature of dynamic library keep compatible with llvm lld
       elf: add some debug info for dynamic library hugepage feature</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
</package>
<package pkgid="dd0b1577957bc78173eb47fbc35921e42e633ccebc83ec191ab5846ca7dde5f4" name="glibc-nss-devel" arch="aarch64">
  <version epoch="0" ver="2.34" rel="167.oe2203sp4"/>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-158" date="1726142400">- Use thp for dynamic shared librarys when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-159" date="1730721600">- elf: execve statically linked programs instead of crashing</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.34-160" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:resolv: Track single-request fallback via _res._flags
       resolv: Allow short error responses to match any query</changelog>
  <changelog author="Qingqing Li &lt;liqingqing3@huawei.com&gt; - 2.34-161" date="1732190400">- try to enable system thp ability when LD_HUGEPAGE_LIB=2</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-162" date="1732881600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: avoid jumping over a needed declaration
       elf: Move __rtld_malloc_init_stubs call into _dl_start_final</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-163" date="1733486400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:elf: Handle static PIE with non-zero load address
       elf: Introduce _dl_relocate_object_no_relro
       elf: Switch to main malloc after final ld.so self-relocation</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-164" date="1733918400">- Change Inner-Net to Inner-Net-2.0
- Change GFDL to GFDL-1.3-only</changelog>
  <changelog author="mayuhang &lt;mayuhang@huawei.com&gt; - 2.34-165" date="1739188800">- AArch64: Optimize memcmp</changelog>
  <changelog author="taoyuxiang &lt;taoyuxiang2@huawei.com&gt; - 2.34-166" date="1740484800">- Type:CVE
- CVE:CVE-2025-0395
- SUG:NA
- DESC:fix CVE-2025-0395</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 2.34-167" date="1747828800">- Type:CVE
- CVE:CVE-2025-4802
- SUG:NA
- DESC:fix CVE-2025-4802</changelog>
</package>
<package pkgid="83389afa584ba48b43d2827c98389713548979f6eff4623bb16409e44358ca95" name="gmock" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp4"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="a00ce5d78d718852b09acb110638adad29c9938dbafc5e42fc044b60b645789f" name="gmock-devel" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp4"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="488d716d90a6ffcafca1f30f81e0af030b87b2560f364640b7858232ad9e2ffc" name="gmp" arch="aarch64">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp4"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="e93891b882a57d717835b7b863cb540b2bbfe800a7ec6f5534f0028ce13da384" name="gmp-c++" arch="aarch64">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp4"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="c5a4f58809fa630863fa36a497bbfa08156a512680ed5ba8cc1f22eeb0f73059" name="gmp-debuginfo" arch="aarch64">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp4"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="41773aa94122d60cb4e33dc8fa3b27e8b4f6a86ccc800c8a31d20659f0060703" name="gmp-debugsource" arch="aarch64">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp4"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="2cb764b39f9650e5210b06cbedf1f990fb72f8134bed401f3c99eeddb5226c99" name="gmp-devel" arch="aarch64">
  <version epoch="1" ver="6.2.1" rel="4.oe2203sp4"/>
  <changelog author="luofeng &lt;luofeng13@huawei.com&gt; - 1:6.2.1-3" date="1699272000">- Support build with clang</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1:6.2.1-4" date="1722340800">- move pkgconfig files into devel pacakage</changelog>
</package>
<package pkgid="74591a1d92d6087bb0f2ba5f463c2ba6b887d3578556f70c18eb79c943c3ef58" name="gnupg2" arch="aarch64">
  <version epoch="0" ver="2.2.32" rel="6.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-4" date="1681905600">- add BuildRequires:gnutls-devel to support TLS</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-5" date="1686744000">- backport upstream patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
</package>
<package pkgid="81a85edc08f18ae11b42270893674953d2780caadc9c0a7936bafe0a903d52e0" name="gnupg2" arch="aarch64">
  <version epoch="0" ver="2.2.32" rel="7.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-5" date="1686744000">- backport upstream patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-7" date="1746532800">- fix CVE-2025-30258</changelog>
</package>
<package pkgid="eaf878afc225caa0d4e7676758f2c27e80efdc0cfc1cc99646cd8cb5a89fb176" name="gnupg2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.2.32" rel="6.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-4" date="1681905600">- add BuildRequires:gnutls-devel to support TLS</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-5" date="1686744000">- backport upstream patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
</package>
<package pkgid="80b003bb498d2ac33135873299bdbcb3361b54428a9fd7ca5a51ee155ef04162" name="gnupg2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.2.32" rel="7.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-5" date="1686744000">- backport upstream patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-7" date="1746532800">- fix CVE-2025-30258</changelog>
</package>
<package pkgid="8253e568d2ad26762d5aa99fcc702e1186631df71a9942d4ac589b2fe96bf323" name="gnupg2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.2.32" rel="6.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-4" date="1681905600">- add BuildRequires:gnutls-devel to support TLS</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-5" date="1686744000">- backport upstream patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
</package>
<package pkgid="4dad6b60e1b60ffdc4179ce2463a2e7501163d74f74e60a7a4b4c7c63e37612e" name="gnupg2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.2.32" rel="7.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-5" date="1686744000">- backport upstream patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-7" date="1746532800">- fix CVE-2025-30258</changelog>
</package>
<package pkgid="a2deb7096b919c0bbb87891a2d6ed2d960c480f1fd786abe58c07581a47b9511" name="gnupg2-help" arch="noarch">
  <version epoch="0" ver="2.2.32" rel="6.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-4" date="1681905600">- add BuildRequires:gnutls-devel to support TLS</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-5" date="1686744000">- backport upstream patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
</package>
<package pkgid="f1b8be108a33167d2ab76f3894600d8ae8b3eb848e6132d2e998af6892f1aba7" name="gnupg2-help" arch="noarch">
  <version epoch="0" ver="2.2.32" rel="7.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-5" date="1686744000">- backport upstream patch</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-6" date="1742558400">- backport upstream patch to fix double free</changelog>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 2.2.32-7" date="1746532800">- fix CVE-2025-30258</changelog>
</package>
<package pkgid="7589a1bf031d99297d66a4c38f1f50a1c7ef01cddfa5caff2c8839633eb7be3a" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="16.oe2203sp4"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1687003200">- add sw arch patch</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1687003201">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-14" date="1713441600">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-15" date="1713441601">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-16" date="1739448000">- fix CVE-2024-12243</changelog>
</package>
<package pkgid="344c4bfd75e1988fdba026a45583d49501fd9c09c49447e0c961357e5425a5b1" name="gnutls-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="16.oe2203sp4"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1687003200">- add sw arch patch</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1687003201">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-14" date="1713441600">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-15" date="1713441601">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-16" date="1739448000">- fix CVE-2024-12243</changelog>
</package>
<package pkgid="f40e1560ca747e143e9f78816594ea2436e7221d4af442c2797d7168f83505f5" name="gnutls-debugsource" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="16.oe2203sp4"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1687003200">- add sw arch patch</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1687003201">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-14" date="1713441600">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-15" date="1713441601">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-16" date="1739448000">- fix CVE-2024-12243</changelog>
</package>
<package pkgid="4a945e5160992eee564db728f7a6bbc1338ffc901071f18b8f5a8ccca6e62202" name="gnutls-devel" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="16.oe2203sp4"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1687003200">- add sw arch patch</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1687003201">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-14" date="1713441600">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-15" date="1713441601">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-16" date="1739448000">- fix CVE-2024-12243</changelog>
</package>
<package pkgid="d62b693c86d42b5ac16ee4c57054bdd81f85ebc4395a03c23ead6e4f8fe005a4" name="gnutls-help" arch="noarch">
  <version epoch="0" ver="3.7.2" rel="16.oe2203sp4"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1687003200">- add sw arch patch</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1687003201">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-14" date="1713441600">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-15" date="1713441601">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-16" date="1739448000">- fix CVE-2024-12243</changelog>
</package>
<package pkgid="74fb04e374d2efb6d80b5eaa00f5ba90e0febcbe31e3d97aa7f9c33b430f8ce1" name="gnutls-utils" arch="aarch64">
  <version epoch="0" ver="3.7.2" rel="16.oe2203sp4"/>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-7" date="1687003200">- add sw arch patch</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-8" date="1687003201">- add nettle-devel version</changelog>
  <changelog author="xuraoqing &lt;609179072@qq.com&gt; - 3.7.2-9" date="1688040000">- add nettle version restriction</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-10" date="1700481600">- fix CVE-2023-5981</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-11" date="1705492800">- fix CVE-2024-0553 and CVE-2024-0567</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-12" date="1711195200">- fix CVE-2024-28834</changelog>
  <changelog author="xuraoqing &lt;xuraoqing@huawei.com&gt; - 3.7.2-13" date="1711454400">- update patch to remove function declare in header file</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-14" date="1713441600">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-15" date="1713441601">- fix CVE-2024-28835</changelog>
  <changelog author="fangxiuning &lt;fangxiuning@huawei.com&gt; - 3.7.2-16" date="1739448000">- fix CVE-2024-12243</changelog>
</package>
<package pkgid="7de32966baa0354307910ca41ded77f0a7717c0f9a69a54d30ae08fe392fb659" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="35.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
</package>
<package pkgid="3a05e07ae19cf68372caceebe620a39eddce26928af6db747f9d6c65adaf4aa9" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="37.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
</package>
<package pkgid="4e93d9d47a7c2ba39e7049e2faf5ffa909aa7c70072f63784b32d4aee82166e6" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="39.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540800">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
</package>
<package pkgid="b8f5ac842236f63721d88e0c4679a7c906f80b407d3b0147138b4c752d835eb7" name="golang" arch="aarch64">
  <version epoch="0" ver="1.17.3" rel="40.oe2203sp4"/>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-40" date="1750680000">- Type:CVE
- CVE:CVE-2025-4673
- SUG:NA
- DESC:fix CVE-2025-4673</changelog>
</package>
<package pkgid="a16591964b5dd0b1eb45448819d16c611ca3a8f11d28e1e116d474612b0b13d5" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="35.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
</package>
<package pkgid="cc1864be0ba79bbc565a5094791d0b32706644315eeaf9abf31f9f1dac427c8e" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="37.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
</package>
<package pkgid="2cb5f62014896c8c508e612d6cf83b6f9b5b8d0dd2a4ef6017319d10a121b6b6" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="39.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540800">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
</package>
<package pkgid="d7b68540e4cbacd0815f586abe039121783781fd4c66dba44504a919fdb62d4d" name="golang-devel" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="40.oe2203sp4"/>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-40" date="1750680000">- Type:CVE
- CVE:CVE-2025-4673
- SUG:NA
- DESC:fix CVE-2025-4673</changelog>
</package>
<package pkgid="a4f45ebc50488a495521e0d86c2f858fdf219fbcb06dea8a4b715d9a9d23bd96" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="35.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-26" date="1702641600">- Type:CVE
- CVE:CVE-2023-39326,CVE-2023-45285
- SUG:NA
- DESC:fix CVE-2023-39326,CVE-2023-45285</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-27" date="1705406400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix test error about mod_insecure_issue63845</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
</package>
<package pkgid="459a4948c8c9984c8aa8a0faef7ffd83176eaec1b014470ca9a9e3b8b370d861" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="37.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-28" date="1710504000">- Type:CVE
- CVE:CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289
- SUG:NA
- DESC:fix CVE-2024-24783,CVE-2024-24785,CVE-2023-45290,CVE-2023-45289</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-29" date="1711540800">- Type:bugfix
- CVE:
- SUG:NA
- DESC:fix failure of `net/http` unit test and enable go unit test</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540801">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
</package>
<package pkgid="fc8dce031b0fd544ca8db1309b831805f272dc93e8e6c93f96835bbc8d9a8d5f" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="39.oe2203sp4"/>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-30" date="1711540800">- Type:CVE
- CVE:CVE-2024-24784
- SUG:NA
- DESC:fix CVE-2024-24784</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
</package>
<package pkgid="ec4630cd7de048f45e9434302cce0818b4da6597c315da6dd26e00386cb1e66a" name="golang-help" arch="noarch">
  <version epoch="0" ver="1.17.3" rel="40.oe2203sp4"/>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.17.3-31" date="1711713600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:backport the upstream patch, fix the overflow issue in runtime.netpollWaiters</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-32" date="1713268800">- Type:CVE
- CVE:CVE-2023-45288
- SUG:NA
- DESC:fix CVE-2023-45288</changelog>
  <changelog author="lujingxiao &lt;lujingxiao@huawei.com&gt; - 1.17.3-33" date="1716811200">- Type:CVE
- CVE:CVE-2024-24787
- SUG:NA
- DESC:fix CVE-2024-24787</changelog>
  <changelog author="yangjiaqi &lt;yangjiaqi16@huawei.com&gt; - 1.17.3-34" date="1719230400">- Type:CVE
- CVE:CVE-2024-24789
- SUG:NA
- DESC:fix CVE-2024-24789</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-35" date="1722945600">- Type:CVE
- CVE:CVE-2024-24791
- SUG:NA
- DESC:fix CVE-2024-24791</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-36" date="1729080000">- Type:CVE
- CVE:CVE-2024-34155
- SUG:NA
- DESC:fix CVE-2024-34155</changelog>
  <changelog author="hanchao &lt;hanchao63@huawei.com&gt; - 1.17.3-37" date="1729598400">- Type:CVE
- CVE:CVE-2024-34156,CVE-2024-34158
- SUG:NA
- DESC:fix CVE-2024-34156,CVE-2024-34158</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-38" date="1740139200">- Type:CVE
- CVE:CVE-2024-45341 CVE-2024-45336
- SUG:NA
- DESC:fix CVE-2024-45341 CVE-2024-45336</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-39" date="1744113600">- Type:CVE
- CVE:CVE-2025-22870
- SUG:NA
- DESC:fix CVE-2025-22870</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 1.17.3-40" date="1750680000">- Type:CVE
- CVE:CVE-2025-4673
- SUG:NA
- DESC:fix CVE-2025-4673</changelog>
</package>
<package pkgid="e884f6d53a52e8a3c6e049135e6e254627eabf031f8f32640ab4c8c15daab0ad" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="472bcaf9c953cbfd07e2a74e6626633085a7f7af6a8f9f589fdf228700816e26" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="7f2413b2e36299860dc0bbe755fb7663decbfb7d734b2ba4b2524fa7c029f4b7" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="6eda96d48504d484780edd24f04f3d2cfd309e2f26b8cc5d6f4cd0d7413f7423" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="78c448a91a6c7fe46b8c4ab27a195b756c29ade4eb98031b03a3d14010e86516" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="619c3b546742343d86f000d547773cfe85be1f406a54d3907dd2d747f5dfe102" name="grub2-debuginfo" arch="aarch64">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="0d98d262570d4b1ed164975049e1220428633e32803c7a4547eb9517466b086c" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="f72c3fa5834833d761fa4f4161163d56377459c4834e3a29644bfb87cbde5103" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="f78e9a70ca9ffbdcdd8019bf98956f0af9876575f3a43a9c4cf37b8c67eab7e2" name="grub2-debugsource" arch="aarch64">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="325e04284a165bd77e4f631189584dcd68a5582490dccbb37408b0debe1eea7e" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="0110d2078e437590c3ef757b3351bdbbedf64c3c89fdd8268f8b77ef98399fa6" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="434b276da5d115ac6300873731a26998e8fdd0dec2463757f213403ef2c107e8" name="grub2-efi-aa64" arch="aarch64">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="7b2efee44b426c8ed9133a308f04758d07673f3d48ef7a713fd0007b2195f505" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="da02fed360e16680b1cae9e41ebc1a6090d10d8fcbbabc8921833968d3a0e543" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="449e3a3925bbb4371bb84fb017ad25caa007b31aaff70d98a00d951f472ecee2" name="grub2-efi-aa64-cdboot" arch="aarch64">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="4abbe2fe4f2ebaba5b8e55cbeb716d0fbd4d6b5229e932585c90f5c613fba7b4" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="b0ba1d676cd2cb2a7e9cdfebedb16f76c7bbd3a2a20cfa300911acc5f99edff6" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="cc9a63a4750fb2825ccd4096501011e7cd9a05c24bb0f521063f50376cda9641" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="3d29f130c8960ede63b26b5c6069bfa65ee4bc00cedf927651e7812e55d4dbdf" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="b7c7769691e6b2f7d2f7af936c8c5e5f51110c5db165e4b0d8527b8b63bc6311" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="c864aa2522f4d5a3e72f07849ca6132d1085aae6530ce530561372acb4e035c6" name="grub2-help" arch="noarch">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="a73eaf64cc362be59e5caf94692954927b2ccc349c5a801bc6fcd2150b9479f0" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="5e8dc9f51a327e96edfdc42c4434191b079ee071e405cf51540dc2a99dd06d0b" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="8ee80204f41e73c2447ba1bb8f12812d2a603720ffd025f7564c613cd5c44bb7" name="grub2-tools" arch="aarch64">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="77d387562d7fff39f41ed8c01224de0c4ee4945abe86492a80e866db6f52d0ba" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="28e513b892168230dcbfd5b39b8388b2346b59b1a0d974d176cae547840dbd79" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="f2c296af4bb08c820aebab81a3b260ba0d92f6fbc8a0b94960fb40b847b966bf" name="grub2-tools-extra" arch="aarch64">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="ec3bbc7ad499df2ce74c2abfcd43d47f7c4775831c46e69376f51d57e9de792e" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="50.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-41" date="1701172800">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:change the name of module tpcm to tpcm_kunpeng</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
</package>
<package pkgid="a17e5eaf31711c0fa2543447c039e265a8b90143e9d57baee103ad069a8f9c64" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="51.oe2203sp4"/>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-42" date="1703073600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:skip verification when not loading grub.cfg</changelog>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
</package>
<package pkgid="f3eb278a5410d8016c1c40c2f388be457a74a9d4110ee4b3b0570e248c9fd603" name="grub2-tools-minimal" arch="aarch64">
  <version epoch="1" ver="2.06" rel="52.oe2203sp4"/>
  <changelog author="mengyingkun &lt;mengyingkun@loongson.cn&gt; - 1:2.06-43" date="1703505600">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:loongarch: Disable relaxation relocations</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-44" date="1709380800">- Type:CVE
- CVE:CVE-2024-1048
- SUG:NA
- DESC:grub-set-bootflag: Fix for CVE-2024-1048
       commands/acpi: Fix calculation of ACPI tables addresses when processing RSDT and XSDT
       kern/acpi: Skip NULL entries in RSDT and XSDT
       util/grub-mount: Check file path sanity</changelog>
  <changelog author="chenyuanfeng &lt;yuanfeng.chen@shingroup.cn&gt; - 1:2.06-45" date="1710417600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add support for ppc64le</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-46" date="1717502400">- Type:CVE
- CVE:CVE-2021-46848
- SUG:NA
- DESC:lib/libtasn1: Fix ETYPE_OK off by one array size check</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-47" date="1718712000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule
       osdep/linux/hostdisk: Use stat() instead of udevadm for partition lookup
       osdep: Introduce include/grub/osdep/major.h and use it
       disk/mdraid1x_linux: Prevent infinite recursion
       disk: Generalize MD_MAX_DISKS to GRUB_MDRAID_MAX_DISKS</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-48" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix log printing in tpcm_kunpeng moddule again</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-49" date="1734782400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:commands/legacycfg: Avoid closing file twice
       disk/lvm: GRUB fails to detect LVM volumes due to an incorrect computation of mda_end</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-50" date="1735041600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix not verifying grub.cfg when loading it</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 1:2.06-51" date="1740484800">- Type:CVE
- CVE:CVE-2024-45781,CVE-2024-45782,CVE-2024-56737,CVE-2024-45780,CVE-2024-45783,CVE-2024-49504,CVE-2025-0624,CVE-20
24-45774,CVE-2024-45775,CVE-2025-0622,CVE-2025-0622,CVE-2025-0622,CVE-2024-45776,CVE-2024-45777,CVE-2025-0690,CVE-20
25-1118,CVE-2024-45778,CVE-2024-45779,CVE-2025-0677,CVE-2025-0684,CVE-2025-0685,CVE-2025-0686,CVE-2025-0689,CVE-2025
-0678,CVE-2025-1125
- SUG:NA
- DESC:fix the vulnerabilities announced on February 18th, 2025</changelog>
  <changelog author="zhangqiumiao &lt;zhangqiumiao1@huawei.com&gt; - 1:2.06-52" date="1744113600">- Type:CVE
- CVE:CVE-2024-56738
- SUG:NA
- DESC:fix CVE-2024-56738</changelog>
</package>
<package pkgid="74aebfa087aa24e108f9e4d0603011e4c395ed46fe83e9fb0c975efb30ee1bd5" name="gsl" arch="aarch64">
  <version epoch="0" ver="2.4" rel="12.oe2203sp4"/>
  <changelog author="yao_xin &lt;yao_xin001@hoperun.com&gt; - 2.4-11" date="1718280000">- License compliance rectification</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-12" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="25819a83aacf64fab1851c1cd70a62d77201869cd0028457296c7f028ddcd753" name="gsl-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4" rel="12.oe2203sp4"/>
  <changelog author="yao_xin &lt;yao_xin001@hoperun.com&gt; - 2.4-11" date="1718280000">- License compliance rectification</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-12" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="8f3c1738701b72d126d5a7cee22cf589d8afa430e0767c7e544b587465e02c45" name="gsl-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4" rel="12.oe2203sp4"/>
  <changelog author="yao_xin &lt;yao_xin001@hoperun.com&gt; - 2.4-11" date="1718280000">- License compliance rectification</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-12" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="cd73e5d0c334b6c414080e4a3eb9551d6aa4f3537cadccbe33c27ffd9f133ccd" name="gsl-devel" arch="aarch64">
  <version epoch="0" ver="2.4" rel="12.oe2203sp4"/>
  <changelog author="yao_xin &lt;yao_xin001@hoperun.com&gt; - 2.4-11" date="1718280000">- License compliance rectification</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-12" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="d7b959b3d540fa36e80c093d8c6c39cce113445b31926d3288449b9082ee9569" name="gsl-help" arch="noarch">
  <version epoch="0" ver="2.4" rel="12.oe2203sp4"/>
  <changelog author="yao_xin &lt;yao_xin001@hoperun.com&gt; - 2.4-11" date="1718280000">- License compliance rectification</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.4-12" date="1730462400">- Fix CVE-2024-50610</changelog>
</package>
<package pkgid="1b4790278a156b54f858e2b1ff9da34870f743d5bfe45da21217b344110721b3" name="gstreamer1-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="8.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
</package>
<package pkgid="d29bff4e7a4fa27f37005cc5a030bd4256b441304a56da9b85e7a2838fe0d1c3" name="gstreamer1-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="9.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-9" date="1748692800">- fix CVE-2025-47806, CVE-2025-47807, CVE-2025-47808</changelog>
</package>
<package pkgid="b42487771ecb70bea1bad284fea3a0f7112a2a980ca6c925d3ee44c27aa5f754" name="gstreamer1-plugins-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="8.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
</package>
<package pkgid="0d830ab2ffb6a3cb9a975170339766f4f0d75fc4b599bd06bb7738a5b37f4cbf" name="gstreamer1-plugins-base-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="9.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-9" date="1748692800">- fix CVE-2025-47806, CVE-2025-47807, CVE-2025-47808</changelog>
</package>
<package pkgid="d1a108a139dee4c526f3ce9c71011d4e67cb8e6cd2b5f97bc32fa553e99e0603" name="gstreamer1-plugins-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="8.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
</package>
<package pkgid="818396d56a15ca2280aec3bd7da1bf5abc110d83c242f35a84f2292901fdf9c0" name="gstreamer1-plugins-base-debugsource" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="9.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-9" date="1748692800">- fix CVE-2025-47806, CVE-2025-47807, CVE-2025-47808</changelog>
</package>
<package pkgid="e01f5aa5299d10c1e8b3f5d3044ba103f160953d6d6c858f861a74846b20e7f7" name="gstreamer1-plugins-base-devel" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="8.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
</package>
<package pkgid="f8db2c52f1023124df455acff7ad5ac97f6db6552057d1b268a89724ffa461a7" name="gstreamer1-plugins-base-devel" arch="aarch64">
  <version epoch="0" ver="1.18.4" rel="9.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-9" date="1748692800">- fix CVE-2025-47806, CVE-2025-47807, CVE-2025-47808</changelog>
</package>
<package pkgid="0567604bc9f09d6770aa31b4329c8c464c3719002fae151ca6a3779fe15ad9c5" name="gstreamer1-plugins-base-help" arch="noarch">
  <version epoch="0" ver="1.18.4" rel="8.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
</package>
<package pkgid="6417208ac1d06c5583be4a9b435884cbb2e6bba65feee21ed0c4a0a408c32f97" name="gstreamer1-plugins-base-help" arch="noarch">
  <version epoch="0" ver="1.18.4" rel="9.oe2203sp4"/>
  <changelog author="liyanan &lt;liyanan61@h-partners.com&gt; - 1.18.4-4" date="1706702400">- Delete unnecessary files</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 1.18.4-5" date="1707048000">- Add build sw_64 support</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-6" date="1710504000">- fix CVE-2023-37328</changelog>
  <changelog author="technology208 &lt;technology@208suo.com&gt; - 1.18.4-7" date="1716206400">- optimize subparse end_tag process</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-8" date="1733313600">- fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
  CVE-2024-47607, CVE-2024-47615, CVE-2024-47835</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.18.4-9" date="1748692800">- fix CVE-2025-47806, CVE-2025-47807, CVE-2025-47808</changelog>
</package>
<package pkgid="c5bcc962ca08a68b5d87edb9ae603c642db4ee70d455be993d4718ee0bec706c" name="gstreamer1-plugins-good" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="10.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.16.2-9" date="1745236800">- Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.16.2-10" date="1748692800">- fix CVE-2025-47219</changelog>
</package>
<package pkgid="15aaa6e93934cb96543d6a55bab953236c9710562cc6f1d46f6fbe0295761e51" name="gstreamer1-plugins-good" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="8.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
</package>
<package pkgid="e31f23750d779ee5fca6ecc8f9b27ad1fda522f38ee3ab9ca5ab34d375b7d03f" name="gstreamer1-plugins-good-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="10.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.16.2-9" date="1745236800">- Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.16.2-10" date="1748692800">- fix CVE-2025-47219</changelog>
</package>
<package pkgid="a4f45f7673ff739ddde939ea24e77455f39a7f3dfd791e4e6165590cd25f1684" name="gstreamer1-plugins-good-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="8.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
</package>
<package pkgid="12128f864457e138b0d630a552486c8b233451d42930f454fe5d1858604fec9e" name="gstreamer1-plugins-good-debugsource" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="10.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.16.2-9" date="1745236800">- Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.16.2-10" date="1748692800">- fix CVE-2025-47219</changelog>
</package>
<package pkgid="e5656d9d65aea6a43700a834f8b1e7c5f45ea7305b7ccadc87e5fc84f298c669" name="gstreamer1-plugins-good-debugsource" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="8.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
</package>
<package pkgid="676c6145eaf68352779da00ea682097b3e6c26b5a3b1b46e48a97e891fa0b276" name="gstreamer1-plugins-good-gtk" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="10.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.16.2-9" date="1745236800">- Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.16.2-10" date="1748692800">- fix CVE-2025-47219</changelog>
</package>
<package pkgid="988abbef71fb05ee6a475214f65983c5b97cfcbcc6cd715cca8bcfe21da7aa01" name="gstreamer1-plugins-good-gtk" arch="aarch64">
  <version epoch="0" ver="1.16.2" rel="8.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
</package>
<package pkgid="d2a8bb8c510e2bcb4d8bc5d7cdc7e2fdf375cb4a7626e6eb8dd7c193a705df28" name="gstreamer1-plugins-good-help" arch="noarch">
  <version epoch="0" ver="1.16.2" rel="10.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
  <changelog author="wangshuo &lt;wangshuo@kylinos.cn&gt; - 1.16.2-9" date="1745236800">- Fixed an issue where the patch for CVE-2021-3497 and CVE-2021-3498 was reversed</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.16.2-10" date="1748692800">- fix CVE-2025-47219</changelog>
</package>
<package pkgid="4f975b654dcfa056f21b7cf24bf2bb1b2a2c83a34fd28362e6b8c0e1d75a44c2" name="gstreamer1-plugins-good-help" arch="noarch">
  <version epoch="0" ver="1.16.2" rel="8.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.16.2-6" date="1702641600">- Fix CVE-2023-37327</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-7" date="1734523200">- Fix cves:
  CVE-2024-47606,CVE-2024-47613,CVE-2024-47775,CVE-2024-47776
  CVE-2024-47777,CVE-2024-47778,CVE-2024-47774,CVE-2024-47540
  CVE-2024-47602,CVE-2024-47601,CVE-2024-47834,CVE-2024-47537
  CVE-2024-47597,CVE-2024-47543,CVE-2024-47596,CVE-2024-47539
  CVE-2024-47546</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.16.2-8" date="1734696000">- Fix CVE-2024-47544,CVE-2024-47545,CVE-2024-47599 and CVE-2024-47603</changelog>
</package>
<package pkgid="7b4df7b1e18050c6cb46eba5a8381a9ce8d81f342cfdb4da29a69c95a79fefec" name="gtest" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp4"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="0f5d31d8e47b9c64dbabf1e854ae6b724507749d6fb4232f2b7acb172c9bd5dc" name="gtest-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp4"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="2dfac431f068ba8e49bff4fb1f1baddef665f33b0743bbfa83490384d6274b40" name="gtest-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp4"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="340a7162a622e40c96fd26b27a77ce74d7a61d7a16301cc50e9f7c4e8afb4a12" name="gtest-devel" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="5.oe2203sp4"/>
  <changelog author="xingxing&lt;xingxing@xfusion.com&gt; - 1.8.1-4" date="1674043200">- Internal Change</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 1.8.1-5" date="1720699200">- cmake modules in gtest-devel needs libgmock.so.*</changelog>
</package>
<package pkgid="a7065d8ee60f8b874b7dcd1ad372541017547333e92df3c55b4b92e68e432f6e" name="gtk-update-icon-cache" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="8ffd694c431ba324dd6251d61786895b8e97d0b0a53903662b1f9aff9da733b0" name="gtk2" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="143c3f223998182aa7e6dc11d33cec2ced3e302c185874eb07c4cb70ee2acf0d" name="gtk2-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="1c5aec68d6fa0a9c2f820da5bf3339ecd3e1aea0d63e65c2a7deb2de870f7f89" name="gtk2-debugsource" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="89d63abcdce155b1ddeb2b399532c70abe78aa0986494aa05efaa8ecf8cab753" name="gtk2-devel" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="6d319749fa40b81ba943928d954ac61c8362e4c7b53f5f08f1bf20594b1c8093" name="gtk2-help" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="173495423f4afeda1190cf36a1186efe92f06ac3ee807d230802bb7721c1373b" name="gtk2-immodule-xim" arch="aarch64">
  <version epoch="0" ver="2.24.33" rel="9.oe2203sp4"/>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-7" date="1705406400">- delete taboo words</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 2.24.33-8" date="1705579200">- revert last commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 2.24.33-9" date="1721044800">- fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="993724412ea88cae4640cb20a02bd296017dbcf16408403f26396e2192466462" name="gtk3" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="562d907308e8ad5bbb66f306deb988ee1e33449d2c498f1d7e82b8425f508002" name="gtk3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="fedabd09512c3b26649739302f446618e8cd9d171b10bb39282c15beecf58d23" name="gtk3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="33292bbba5c746437de47f686db88b93899e2b92a08a9291e2be857ba4d3c2ed" name="gtk3-devel" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="27738995f2170d9d4cc2befc7827efbeedbd48954e746f0d8e34f4fd74119309" name="gtk3-help" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="df834bf67d0e760840f05f074eb3a0d22d572fe7e5c57ca648e15dec02f5f64a" name="gtk3-immodule-xim" arch="aarch64">
  <version epoch="0" ver="3.24.30" rel="11.oe2203sp4"/>
  <changelog author="zhouwenpei &lt;zhouwenpei1@h-partners.com&gt; - 3.24.30-6" date="1666785600">- Rebuild for next release</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-7" date="1686830400">- delete taboo words</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-8" date="1692619200">- Fix the problem that the prompt information of network icon volume icon is not displayed
- update xscreen size when x11 screen size change
- always send the monitors changed signal when screen size change
- Add function definition of gtk_image_set_from_pixbuf_with_scale</changelog>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.24.30-9" date="1705406400">- revert last commit not issue patch file</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 3.24.30-10" date="1705579200">- revert delete taboo words commit</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 3.24.30-11" date="1720699200">- Fix CVE-2024-6655: Library injection from CWD</changelog>
</package>
<package pkgid="45b4c2d7b9259929f8f073e3489614100b7af76204cd2b9ca00dea094ef6a0d0" name="hadoop-client" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="be6f6d39a707996c9ee759d839206cb686f5fc25a4d01edb70be8e3eca29b9d4" name="hadoop-common" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="e577453007dfacbaa4c6f797c49f550f703821dc8c7383e1c314cf9db202eaa9" name="hadoop-common-native" arch="aarch64">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="808f40c0f0821ffc845df0e5efa92af56f60772512dad4e56cc1144e280632e3" name="hadoop-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="002b309e19628bd2d82334220623b739bb52ec6fa762718a42c381ceeb151e03" name="hadoop-debugsource" arch="aarch64">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="e2b774fa7ba20d194b09db22417357e1b7103cbb29afafd6ec9dd6dfb4d42bc1" name="hadoop-devel" arch="aarch64">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="ec8f3232fdbaf24045365522500d818651ed6a1f2288156f676d04989f2f7c9c" name="hadoop-hdfs" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="4e3149c6a19df7ee0c0dd8fcd33d3bf692cf936699e8131f638af6893624c586" name="hadoop-httpfs" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="97329ea4769497e51525d4d33c5722e3771029d4224b6d3604e28e3cd08816f2" name="hadoop-mapreduce" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="2426b964cfaeff2c167de2ee6df9e8213020c4c98b4cba7aa9081e6547163f72" name="hadoop-mapreduce-examples" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="04ee0b74d1925e262c628b1cba7fb1c68d363cff350d6a91b3e9a58ea43c612f" name="hadoop-maven-plugin" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="e4e75ec3231c8e73a284874d2d1eb5463c9c5869e13d3f2888e7bd6ddf5bb6ae" name="hadoop-tests" arch="noarch">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="df68fa9c23a860a0c075a9a72f666010ad024565836f8f4fc0b96e9170af12e0" name="hadoop-yarn" arch="aarch64">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="1c296fe487e1163ab5d47289caf6075961f944ca333f88a626d27c7b821cfd22" name="hadoop-yarn-security" arch="aarch64">
  <version epoch="0" ver="3.3.6" rel="3.oe2203sp4"/>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.4-2" date="1678363200">- fix EBS install problem</changelog>
  <changelog author="sunyanan &lt;sunyanan@xfusion.com&gt; - 3.3.4-3" date="1689249600">- lock triple-beam version to 1.3.0</changelog>
  <changelog author="Jia Chao &lt;jiac13@chinaunicom.cn&gt; - 3.3.4-4" date="1692187200">- fix: use $HOME rather than /home/abuild, suit for all buildtools.
- fix: yarn have ELF bin, not noarch at all.</changelog>
  <changelog author="wenweijian wenweijian2@huawei.com - 3.3.6-1" date="1701086400">- fix cve CVE-2023-26031</changelog>
  <changelog author="xiexing &lt;xiexing4@hisilicon.com&gt; - 3.3.6-2" date="1702641600">- add conflicts to hadoop spec</changelog>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 3.3.6-3" date="1727352000">- fix CVE-2024-23454</changelog>
</package>
<package pkgid="9e5e81f4cee5c6f4330c1cc41c87531dcb5c34574ab227dad557bb38dca292f6" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="11.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
</package>
<package pkgid="dc20753750e67955e62574a9b8f834919553720008a87b0e7a59e076f5675a3a" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="14.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
</package>
<package pkgid="3a097d5dddcff1a35d366afed96b2345bbce190b8f4ae445dba478db9bd6ea30" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="15.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
</package>
<package pkgid="c2245c8cbfd2dd85a41d46b27df79f229785fb3367469e0c3a5556601ca32445" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="16.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-16" date="1745928000">- Type:cves
- CVE:CVE-2025-32464
- SUG:NA
- DESC:fix CVE-2025-32464</changelog>
</package>
<package pkgid="c1133d5e0289c6c40f13dced89f594a79f561953db5a36c00b2b4c8081130451" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="11.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
</package>
<package pkgid="3f07c2d7aa72e3ee1d2d59893c7bf0fda979a97ecd2251600f6f2833387a9c87" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="14.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
</package>
<package pkgid="82b1f47b6769a7f973c7a120ce2891bcb9dfdbac35230469ddcf4e3f7b5f78b6" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="15.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
</package>
<package pkgid="2d01e8038ef6d8993dd5ab971fb711d6d06742129ba602906ef0e284a1c98f38" name="haproxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="16.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-16" date="1745928000">- Type:cves
- CVE:CVE-2025-32464
- SUG:NA
- DESC:fix CVE-2025-32464</changelog>
</package>
<package pkgid="e58b446e4a86e526130fc81da995d6c2c1ee4051cfcd46a361b7800b56bfdb60" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="11.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
</package>
<package pkgid="76361884a643f520fb5393a8aa1bfffc829cdcc996192e4be45c68b89757b75c" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="14.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
</package>
<package pkgid="0c387761d8b8a0716676456405130e462fa5566003cb1793f5735e45fcad50f0" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="15.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
</package>
<package pkgid="ffcbe025353a19fea43cb2a1fd1c448c6194ddfa32bfcf5ddb094e274afec8e1" name="haproxy-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="16.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-16" date="1745928000">- Type:cves
- CVE:CVE-2025-32464
- SUG:NA
- DESC:fix CVE-2025-32464</changelog>
</package>
<package pkgid="dc0d2566cf8fcb3b1298a6d42f73ee4583e1a30ad9d90558b3575998e673888c" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="11.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 2.6.6-2" date="1677326400">- Fix CVE-2023-25725 and CVE-2023-0056</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-3" date="1681992000">- Fix CVE-2023-25950</changelog>
  <changelog author="wangkai &lt;wang_kai001@hoperun.com&gt; - 2.6.6-4" date="1692619200">- Fix CVE-2023-40225</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
</package>
<package pkgid="a7b7828880bf8e528c14b8c9e839f3d14026d8a2b215c86aa956f5a6dc80617b" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="14.oe2203sp4"/>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.6.6-5" date="1692964800">- fix sw_64 build error</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
</package>
<package pkgid="ec1cda4c19fcdbb5274f345448947215cf9dcb29412f057b878d3aab7f886655" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="15.oe2203sp4"/>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-6" date="1695816000">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:connection: Clear flags when a conn is removed
       connection: Preserve flags when a conn is removed
       stream: do not try to free a failed stream-conn
       http_ana/txn: don't re-initialize txn and req var
       mworker: prevent incorrect values in uptime
       protocol: fix minor memory leak in protocol_bind_all()
       stream: Perform errors handling in right order in stream_new()</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
</package>
<package pkgid="e88520df6d8392b365469c662bac9ed66cbdc11d5723d1e5f3ef8d8a9fa1ed5a" name="haproxy-help" arch="noarch">
  <version epoch="0" ver="2.6.6" rel="16.oe2203sp4"/>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 2.6.6-7" date="1701432000">- Fix CVE-2023-0836</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 2.6.6-8" date="1701864000">- Fix CVE-2023-45539</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-9" date="1705665600">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:backport to fix potential coredump:
       errors: handle malloc failure in usermsgs_put
       ssl_sock: add check for ha_meth
       thread: add a check for pthread_creat</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-10" date="1710158400">- Type:bugfix
- CVE:NA
- SUG:restart
- DESC:server: add missing free for server-&gt;rdr_pfx
       server: do not leak default-server in defaults</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-11" date="1719230400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:server: 'source' interface ignored from 'default-server' directive</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-12" date="1727092800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:haproxy: only tid 0 must not sleep if got signal
       fix timehopping in freq_ctr_total</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-13" date="1732190400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:stream: Prevent mux upgrades if client connection is no longer ready</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.6.6-14" date="1733832000">- Fix CVE-2024-53008</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 2.6.6-15" date="1742212800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:queues:Do not use pendconn_grab_from_px
       queues:Make sure we call process_srv_queue when leaving
       queue:Make process_srv_queue return the number of streams</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 2.6.6-16" date="1745928000">- Type:cves
- CVE:CVE-2025-32464
- SUG:NA
- DESC:fix CVE-2025-32464</changelog>
</package>
<package pkgid="027f137e3db43cf986dd4e059e5145e8d6354a5257111828b9af2af261315183" name="hbm_online_repair" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="22.oe2203sp4"/>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-13" date="1726920000">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:optimize the handing of cat-cli error msg in cpu_sentry
       over threshold should be warn level log in cat-cli</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-14" date="1727265600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:add separator to err info</changelog>
  <changelog author="shixuantong &lt;shixuantong1@huawei.com&gt; - 1.0.2-15" date="1727265601">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:remove threshold:max cpu cores</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-16" date="1729512000">- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add hbm_online_repair</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-17" date="1730116800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix hbm_online_repair notice BMC function and create efi fd</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-18" date="1730462400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix uint8 bug and change page isolation threshold default value</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-19" date="1730721600">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix write file return code bug</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-20" date="1730808000">- Type:enhancement
- CVE:NA
- SUG:NA
- DESC: update the commit of the log level and format function of sysSentry</changelog>
  <changelog author="luckky &lt;guodashun1@huawei.com&gt; - 1.0.2-21" date="1730894400">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: add boundary check for settings</changelog>
  <changelog author="caixiaomeng &lt;caixiaomeng2@huawei.com&gt; - 1.0.2-22" date="1730980800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC: fix xalarm not reject alarm msg exceeds max length</changelog>
</package>
<package pkgid="09a44d1d1de7e1e3def3beb103495f872dee2bb5b687ae64d0a66e4425b11883" name="hdf5" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="47f0f6d1e796a46ce58f81e5a8f697651583c1f1269a740078e9830cff923065" name="hdf5-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="2e3053792ace0603c20d5c5bee656605ed7b42d48d7d6a92e4f8551119767245" name="hdf5-debugsource" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="869af30dbb56278421230ed0502a80323eba43056f4b4b3dbd5f29bbdc8d9132" name="hdf5-devel" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="97f6daa9d1db713538fed43a83b475d6268e4f7e488ff8d3134f066567e2a92e" name="hdf5-mpich" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="a89847a0d0933f0a4e60112644beaf29ee867aa9f8658dff0a39eb8261c28c2d" name="hdf5-mpich-devel" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="43fe430a65a7b95f4b1f2b6ad7927aa79736f986e2e73b83a6e4dca068f2c130" name="hdf5-mpich-static" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="afbc8b0ef45b7dbaa1c38343929b9f76e3676bc5f78c993cb9c7d2abc28cd5b1" name="hdf5-openmpi" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="be47f926549eb75d22c36b2762e9d0c6353a8e089472bc1dcada757f8354f026" name="hdf5-openmpi-devel" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="f876f9715a97e464e623f17bae52706bfb5e5d850054f543947513878357cf74" name="hdf5-openmpi-static" arch="aarch64">
  <version epoch="0" ver="1.14.5" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yaoxin30@h-partners.com&gt; - 1.12.1-2" date="1680004800">- Fix CVE-2018-13867,CVE-2018-14031,CVE-2018-16438,CVE-2019-8396,CVE-2020-10812 and CVE-2021-37501</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-3" date="1681128000">- fix some commands failed</changelog>
  <changelog author="liyanan &lt;thistleslyn@163.com&gt; - 1.12.1-4" date="1681214400">- Preserve the rpath of the hdf5-openmpi and hdf5-mpich subpackages</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 1.12.1-5" date="1693483200">- Add BuildRequires environment-modules</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 1.12.1-6" date="1703073600">- Add disable-hltools flag to fix CVE-2018-17433, CVE-2018-17436, CVE-2020-10809</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 1.14.5-1" date="1730289600">- Update to 1.14.5:
  * Added signed Windows msi binary and signed Apple dmg binary files.
  * Moved examples to the HDF5Examples folder in the source tree.
  * Added support for using zlib-ng package as the zlib library
  * Disable CMake UNITY_BUILD for hdf5
  * Removed "function/code stack" debugging configuration option
  * Added configure options for enabling/disabling non-standard programming language features
  * Added the CMake variable HDF5_ENABLE_ROS3_VFD to the HDF5 CMake config
    file hdf5-config.cmake. This allows it to easily detect if the library
    has been built with or without read-only S3 functionality.
  * Fixed many CVE:
    CVE-2024-29157,CVE-2024-29158,CVE-2024-29159,CVE-2024-29160,CVE-2024-29161,CVE-2024-29162
    CVE-2024-29163,CVE-2024-29164,CVE-2024-29165,CVE-2024-29166,CVE-2024-32605,CVE-2024-32606
    CVE-2024-32607,CVE-2024-32608,CVE-2024-32609,CVE-2024-32610,CVE-2024-32611,CVE-2024-32612
    CVE-2024-32613,CVE-2024-32614,CVE-2024-32615,CVE-2024-32616,CVE-2024-32617,CVE-2024-32618
    CVE-2024-32619,CVE-2024-32620,CVE-2024-32621,CVE-2024-32622,CVE-2024-32623,CVE-2024-32624
    CVE-2024-33873,CVE-2024-33874,CVE-2024-33875,CVE-2024-33876,CVE-2024-33877,CVE-2018-13871
    CVE-2018-13875,CVE-2018-14034</changelog>
</package>
<package pkgid="1733b70b8d866c893ff2d8b71b59ee1a314006c934a86ad6b9b00b34d6573002" name="hikptool" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="17.oe2203sp4"/>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-9" date="1680782400">- fix sas device info print error bug</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-10" date="1685448000">- sync code: fix PCIe and serdes, roh module problem</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-11" date="1685793600">- fix compiling specifications check problem</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-12" date="1697803200">- Added DFX for UB, NIC, MAC modules, fixed some bugs</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-13" date="1700136000">- Synchronize the code and add the DFX of the roce module to resolve some review comments</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-14" date="1713960000">- Synchronize code, fix some issues with ROH, PCIE and NIC modules</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-15" date="1716465600">- Synchronize code, the DFX register of the ECAM is added when the PCIe dumps registers</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-16" date="1732190400">- Synchronize code, Modify the review comments to increase the reliability of the code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-17" date="1742299200">- The HCCS and SDMA modules and the log collection function are added</changelog>
</package>
<package pkgid="af67d563e462006e4af8d2de8dde851e6a35f21c69d12893dd4f3ebcde9de092" name="hikptool" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="18.oe2203sp4"/>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-12" date="1697803200">- Added DFX for UB, NIC, MAC modules, fixed some bugs</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-13" date="1700136000">- Synchronize the code and add the DFX of the roce module to resolve some review comments</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-14" date="1713960000">- Synchronize code, fix some issues with ROH, PCIE and NIC modules</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-15" date="1716465600">- Synchronize code, the DFX register of the ECAM is added when the PCIe dumps registers</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-16" date="1732190400">- Synchronize code, Modify the review comments to increase the reliability of the code</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-17" date="1742299200">- The HCCS and SDMA modules and the log collection function are added</changelog>
  <changelog author="veega2022 &lt;zhuweijia@huawei.com&gt; 1.0.0-18" date="1749211200">- The cpu_ring command is added.</changelog>
</package>
<package pkgid="6e6592698b367c6373ab38cac91987c27df28969f69d3d5dd32ecdcd93001e22" name="hplip" arch="aarch64">
  <version epoch="0" ver="3.23.8" rel="2.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.18.6-12" date="1681387200">- fix the problem of using hplip in python3.9</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.23.8-1" date="1697025600">- Upgrade to 3.23.8</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 3.23.8-2" date="1732190400">- fix self build failed.</changelog>
</package>
<package pkgid="370f952c6629762cedd3800a6fd2a7a9522a1011d20ec728a1ab1d92bdf9da12" name="hplip-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.23.8" rel="2.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.18.6-12" date="1681387200">- fix the problem of using hplip in python3.9</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.23.8-1" date="1697025600">- Upgrade to 3.23.8</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 3.23.8-2" date="1732190400">- fix self build failed.</changelog>
</package>
<package pkgid="331ebcee2a37be272da101c05a208526968bc4fd2e44bc52b41b88e445b931cc" name="hplip-debugsource" arch="aarch64">
  <version epoch="0" ver="3.23.8" rel="2.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 3.18.6-12" date="1681387200">- fix the problem of using hplip in python3.9</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.23.8-1" date="1697025600">- Upgrade to 3.23.8</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 3.23.8-2" date="1732190400">- fix self build failed.</changelog>
</package>
<package pkgid="a8da1bd12e8c800dcab52425e76fda755d50ddfb113ab96e12539dc9e7188c9f" name="httpd" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp4"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 2.4.51-13" date="1675339200">- Type:cves
- ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="dc323bc2b3ca189ef7d6744f23d9f59eeb229ea4e24c5cbdd630d07556324063" name="httpd" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="9161783ef9a12065f951d732fe64d9995402f6bda372bcbacd10e3522dda3fd1" name="httpd" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="24.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.51-24" date="1744804800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mod_log_config: Fix LogFormat directive merging
       Fix X509 leak and Increase MAX_CONCURRENCY hard limit
       mod_proxy_balancer: Fix the handling of the stickysession
       mod_cache_socache: Fix possible crash on error path
       mod_ssl: Check SSL_CTX_new() return value
       core: Report invalid Options argument when parsing AllowOverride directives</changelog>
</package>
<package pkgid="9411c61c946602a415bbefc356c1dcda802a7ac61268bd922242897accc25da7" name="httpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp4"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 2.4.51-13" date="1675339200">- Type:cves
- ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="230ab95d21dd85d597270fc69bdf03fc994557f074907a2489428c1c593e5442" name="httpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="52615ea51339de0acb5425ce1499c6b426ab44a551a94217ba8292d04dc1de9e" name="httpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="24.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.51-24" date="1744804800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mod_log_config: Fix LogFormat directive merging
       Fix X509 leak and Increase MAX_CONCURRENCY hard limit
       mod_proxy_balancer: Fix the handling of the stickysession
       mod_cache_socache: Fix possible crash on error path
       mod_ssl: Check SSL_CTX_new() return value
       core: Report invalid Options argument when parsing AllowOverride directives</changelog>
</package>
<package pkgid="cca29afa25c66eee6113cc9c504bd0fb908e66af6eeb4adb1ea8585323b1fbd1" name="httpd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp4"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 2.4.51-13" date="1675339200">- Type:cves
- ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="348a3e7785ef201b60f1cdf7f7ccc95cc52a7b03b4d0ba8f0de50e00e6b3695b" name="httpd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="5601a2de076bdd9acc318d0b84f278994bf733483e6e9a850508c9567f548bd3" name="httpd-debugsource" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="24.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.51-24" date="1744804800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mod_log_config: Fix LogFormat directive merging
       Fix X509 leak and Increase MAX_CONCURRENCY hard limit
       mod_proxy_balancer: Fix the handling of the stickysession
       mod_cache_socache: Fix possible crash on error path
       mod_ssl: Check SSL_CTX_new() return value
       core: Report invalid Options argument when parsing AllowOverride directives</changelog>
</package>
<package pkgid="79c7d8aa3dd0639620d5e77fcff272303408211f84bdc802cd0b0b8bd2a34702" name="httpd-devel" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp4"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 2.4.51-13" date="1675339200">- Type:cves
- ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="4e9cce071c4e700495c7fe7643ffb8669f11590e14d12a0a88586a3eb8cc642f" name="httpd-devel" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="48490f7b8af908bb4dfaefb351f986a1ee2af58de1e3fd27e4684396d2be3eae" name="httpd-devel" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="24.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.51-24" date="1744804800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mod_log_config: Fix LogFormat directive merging
       Fix X509 leak and Increase MAX_CONCURRENCY hard limit
       mod_proxy_balancer: Fix the handling of the stickysession
       mod_cache_socache: Fix possible crash on error path
       mod_ssl: Check SSL_CTX_new() return value
       core: Report invalid Options argument when parsing AllowOverride directives</changelog>
</package>
<package pkgid="6ce47bd876056fe994bbc7cc19b5464b81a1b03310c746fe10418c04dee0ab59" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp4"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 2.4.51-13" date="1675339200">- Type:cves
- ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="710e71414a19746facda808144b3401d0f46fa2757629580e5d88d42e8d3d090" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="f8de1c25b047ed454d9c3af48b8e95a536dee90cd8cbf4d77d5c7d5968901b6c" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="24.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.51-24" date="1744804800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mod_log_config: Fix LogFormat directive merging
       Fix X509 leak and Increase MAX_CONCURRENCY hard limit
       mod_proxy_balancer: Fix the handling of the stickysession
       mod_cache_socache: Fix possible crash on error path
       mod_ssl: Check SSL_CTX_new() return value
       core: Report invalid Options argument when parsing AllowOverride directives</changelog>
</package>
<package pkgid="50b682c7cc602d6eeba4b1fd856894570324c8bef3d6ba4f61fcc27a9b66f8de" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp4"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 2.4.51-13" date="1675339200">- Type:cves
- ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="1afac32d703720ae77ddc764ec10c3b5c5757c2c1f5a523da55c3f7a3bf94354" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="938e3c186c428dc73efb35b2bc3ef7da4631c9c820c644b6b5c0b699191b2211" name="httpd-help" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="24.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.51-24" date="1744804800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mod_log_config: Fix LogFormat directive merging
       Fix X509 leak and Increase MAX_CONCURRENCY hard limit
       mod_proxy_balancer: Fix the handling of the stickysession
       mod_cache_socache: Fix possible crash on error path
       mod_ssl: Check SSL_CTX_new() return value
       core: Report invalid Options argument when parsing AllowOverride directives</changelog>
</package>
<package pkgid="2f44ff4b91e822fa6e1c4db2946a4f7df5f6d1404c4fd2d520de367f588d44ac" name="httpd-tools" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="22.oe2203sp4"/>
  <changelog author="seuzw &lt;930zhaowei@163.com&gt; - 2.4.51-13" date="1675339200">- Type:cves
- ID:CVE-2022-36760,CVE-2006-20001,CVE-2022-37436
- SUG:restart
- DESC:fix CVE-2022-36760,CVE-2006-20001,CVE-2022-37436</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
</package>
<package pkgid="c9177d7c02e3634aea773c56c424ab173638425ae046dfabaec39643a84d1cc4" name="httpd-tools" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="23.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-14" date="1678363200">- Type:bugfix
- ID:NA
- SUG:restart
- DESC:mod_dav:open the lock database read-only when possible</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-15" date="1678449600">- Type:CVE
- ID:CVE-2023-27522, CVE-2023-25690
- SUG:restart
- DESC:fix CVE-2023-27522, CVE-2023-25690</changelog>
  <changelog author="chengyechun &lt;chengyehcun1@huawei.com&gt; - 2.4.51-16" date="1681473600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Report an error if the AJP backend sends an invalid number of headers
       handled a negative value when parsing the config
       avoid delimiting the query with a backreference
       fix missing APLOGNO</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
</package>
<package pkgid="f58b3f93efc0b3702549699ffd623177d4051a6b3944fe22d2d8a6c616743ba8" name="httpd-tools" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="24.oe2203sp4"/>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-17" date="1684929600">- Type:bugfix
- ID:
- SUG:restart
- DESC:Fix double encoding of the uri-path of the request
       Do not match the extention against possible query string
       Do not double encode slashes
       Check before forwarding that a nocanon path has not been rewriteen</changelog>
  <changelog author="panchenbo &lt;panchenbo@kylinsec.com.cn&gt; - 2.4.51-18" date="1691582400">- Type:bugfix
- ID:
- SUG:NA
- DESC:add sw_64 support,optimize sw build patch,add loongarch64 support</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-19" date="1699012800">- Type:CVE
- ID:CVE-2023-31122
- SUG:NA
- DESC:fix CVE-2023-31122</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-20" date="1699012801">- Type:CVE
- ID:CVE-2023-45802
- SUG:NA
- DESC:fix CVE-2023-45802</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-21" date="1715083200">- Type:CVE
- ID:CVE-2024-24795,CVE-2023-38709,CVE-2024-27316
- SUG:NA
- DESC:fix CVE-2024-24795,CVE-2023-38709,CVE-2024-27316 and sync some patches from upstream</changelog>
  <changelog author="chengyechun &lt;chengyechun1@huawei.com&gt; - 2.4.51-22" date="1720267200">- Type:CVE
- ID:CVE-2024-38473,CVE-2024-38474,CVE-2024-38475,CVE-2024-38476,CVE-2024-38477,CVE-2024-39884,CVE-2024-39573
- SUG:NA
- DSEC:fix some CVEs</changelog>
  <changelog author="Han Jinpeng &lt;hanjinpeng@kylinos.cn&gt; - 2.4.51-23" date="1724846400">- Type:CVE
- ID:CVE-2024-40725
- SUG:NA
- DESC:fix CVE-2024-40725</changelog>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 2.4.51-24" date="1744804800">- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:mod_log_config: Fix LogFormat directive merging
       Fix X509 leak and Increase MAX_CONCURRENCY hard limit
       mod_proxy_balancer: Fix the handling of the stickysession
       mod_cache_socache: Fix possible crash on error path
       mod_ssl: Check SSL_CTX_new() return value
       core: Report invalid Options argument when parsing AllowOverride directives</changelog>
</package>
<package pkgid="f88b7728beb62e08fb28e65f0d5d38aac27389a0e1d467d8c2d574508db8c5f9" name="iSulad" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="12.oe2203sp4"/>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-3" date="1711800000">- Type: update
- ID: NA
- SUG: NA
- DESC: add support for cgroup v2</changelog>
  <changelog author="jikai &lt;jikai11@huawei.com&gt; - 2.1.5-4" date="1712059200">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-5" date="1713614400">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-6" date="1713614401">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-7" date="1714046400">- Type: update
- ID: NA
- SUG: NA
- DESC: bugfix of background execution exec error command and setting negative cpu-rt issue</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-8" date="1714392000">- Type: update
- ID: NA
- SUG: NA
- DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-9" date="1715428800">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-10" date="1718107200">- Type: update
- ID: NA
- SUG: NA
- DESC: code improve and bugfix</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-11" date="1724068800">- Type: update
- ID: NA
- SUG: NA
- DESC: add impl for nri and bugfix</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.1.5-12" date="1729512000">- Type: update
- ID: NA
- SUG: NA
- DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream</changelog>
</package>
<package pkgid="ca08cc1841eb933cf218928e77a97bbb21a5879c4e5a0a8532e4086960d24a74" name="iSulad" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="18.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-9" date="1715428800">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-10" date="1718107200">- Type: update
- ID: NA
- SUG: NA
- DESC: code improve and bugfix</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-11" date="1724068800">- Type: update
- ID: NA
- SUG: NA
- DESC: add impl for nri and bugfix</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.1.5-12" date="1729512000">- Type: update
- ID: NA
- SUG: NA
- DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-13" date="1732190400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: enable nri support only on specified architecture</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-14" date="1732536000">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-15" date="1732795200">- Type: update
- ID: NA
- SUG: NA
- DESC: sandboxer require isula-rust-extensions</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-16" date="1734523200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for nri</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 2.1.5-17" date="1735560000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: sync patches from upstream</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 2.1.5-18" date="1735560001">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: sync patches from upstream for refactoring sandbox and bugfixing</changelog>
</package>
<package pkgid="75759e38515563b89b80b8b2a6f656bbd738667f98423aeb3b09a064b290bf42" name="iSulad-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="12.oe2203sp4"/>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-3" date="1711800000">- Type: update
- ID: NA
- SUG: NA
- DESC: add support for cgroup v2</changelog>
  <changelog author="jikai &lt;jikai11@huawei.com&gt; - 2.1.5-4" date="1712059200">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-5" date="1713614400">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-6" date="1713614401">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-7" date="1714046400">- Type: update
- ID: NA
- SUG: NA
- DESC: bugfix of background execution exec error command and setting negative cpu-rt issue</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-8" date="1714392000">- Type: update
- ID: NA
- SUG: NA
- DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-9" date="1715428800">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-10" date="1718107200">- Type: update
- ID: NA
- SUG: NA
- DESC: code improve and bugfix</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-11" date="1724068800">- Type: update
- ID: NA
- SUG: NA
- DESC: add impl for nri and bugfix</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.1.5-12" date="1729512000">- Type: update
- ID: NA
- SUG: NA
- DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream</changelog>
</package>
<package pkgid="c16a74b1934f2df3eec087192c8f5ce04553f565bbf4037350adb37e9f57c8cc" name="iSulad-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="18.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-9" date="1715428800">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-10" date="1718107200">- Type: update
- ID: NA
- SUG: NA
- DESC: code improve and bugfix</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-11" date="1724068800">- Type: update
- ID: NA
- SUG: NA
- DESC: add impl for nri and bugfix</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.1.5-12" date="1729512000">- Type: update
- ID: NA
- SUG: NA
- DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-13" date="1732190400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: enable nri support only on specified architecture</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-14" date="1732536000">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-15" date="1732795200">- Type: update
- ID: NA
- SUG: NA
- DESC: sandboxer require isula-rust-extensions</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-16" date="1734523200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for nri</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 2.1.5-17" date="1735560000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: sync patches from upstream</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 2.1.5-18" date="1735560001">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: sync patches from upstream for refactoring sandbox and bugfixing</changelog>
</package>
<package pkgid="3deecba0305c2ad8f40026f6531063d4550b99dd202475982c46858f8d3986a3" name="iSulad-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="12.oe2203sp4"/>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-3" date="1711800000">- Type: update
- ID: NA
- SUG: NA
- DESC: add support for cgroup v2</changelog>
  <changelog author="jikai &lt;jikai11@huawei.com&gt; - 2.1.5-4" date="1712059200">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-5" date="1713614400">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-6" date="1713614401">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-7" date="1714046400">- Type: update
- ID: NA
- SUG: NA
- DESC: bugfix of background execution exec error command and setting negative cpu-rt issue</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-8" date="1714392000">- Type: update
- ID: NA
- SUG: NA
- DESC: remove extra %s in CreateContainerLogSymlink and allow env variable has an empty value</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-9" date="1715428800">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-10" date="1718107200">- Type: update
- ID: NA
- SUG: NA
- DESC: code improve and bugfix</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-11" date="1724068800">- Type: update
- ID: NA
- SUG: NA
- DESC: add impl for nri and bugfix</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.1.5-12" date="1729512000">- Type: update
- ID: NA
- SUG: NA
- DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream</changelog>
</package>
<package pkgid="47fdb0da9c098bca74f4a183f6aa4e91bb8c56ea31ff1ac07b55d658edfd67ab" name="iSulad-debugsource" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="18.oe2203sp4"/>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-9" date="1715428800">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-10" date="1718107200">- Type: update
- ID: NA
- SUG: NA
- DESC: code improve and bugfix</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-11" date="1724068800">- Type: update
- ID: NA
- SUG: NA
- DESC: add impl for nri and bugfix</changelog>
  <changelog author="wujichao &lt;wujichao1@huawei.com&gt; - 2.1.5-12" date="1729512000">- Type: update
- ID: NA
- SUG: NA
- DESC: combine ten similar submissions into one(0125-fix-clang-build-error.patch) and Upgrade from upstream</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-13" date="1732190400">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: enable nri support only on specified architecture</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-14" date="1732536000">- Type: update
- ID: NA
- SUG: NA
- DESC: upgrade from upstream</changelog>
  <changelog author="liuxu &lt;liuxu156@huawei.com&gt; - 2.1.5-15" date="1732795200">- Type: update
- ID: NA
- SUG: NA
- DESC: sandboxer require isula-rust-extensions</changelog>
  <changelog author="zhongtao &lt;zhongtao17@huawei.com&gt; - 2.1.5-16" date="1734523200">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: bugfix for nri</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 2.1.5-17" date="1735560000">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: sync patches from upstream</changelog>
  <changelog author="jingxiaolu&lt;lujingxiao@huawei.com&gt; - 2.1.5-18" date="1735560001">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: sync patches from upstream for refactoring sandbox and bugfixing</changelog>
</package>
<package pkgid="4a06ef0ba55896e27413aa3670e502354d21418923db0dca521631ee631a4b6a" name="icu" arch="aarch64">
  <version epoch="0" ver="72.1" rel="8.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 72.1-7" date="1707048000">- icu already supports loongarch64 architecture
- Remove loongarch64 patch and modify sw_64 support patch to use all arch</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-8" date="1753963200">- fix CVE-2025-5222</changelog>
</package>
<package pkgid="93446722d82f68fb31d4c4c6dbba1698fd63c0380d967def64af4412c921434c" name="icu-debuginfo" arch="aarch64">
  <version epoch="0" ver="72.1" rel="8.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 72.1-7" date="1707048000">- icu already supports loongarch64 architecture
- Remove loongarch64 patch and modify sw_64 support patch to use all arch</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-8" date="1753963200">- fix CVE-2025-5222</changelog>
</package>
<package pkgid="5073439147de976e32bfa566db286efc257e563ad84562f77844c728ef73f394" name="icu-debugsource" arch="aarch64">
  <version epoch="0" ver="72.1" rel="8.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 72.1-7" date="1707048000">- icu already supports loongarch64 architecture
- Remove loongarch64 patch and modify sw_64 support patch to use all arch</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-8" date="1753963200">- fix CVE-2025-5222</changelog>
</package>
<package pkgid="9d4df1775313c49a7b17e8ff05e7fa01cd7280f9d8aac967876495d60900eb5c" name="icu-help" arch="noarch">
  <version epoch="0" ver="72.1" rel="8.oe2203sp4"/>
  <changelog author="yangchenguang &lt;yangchenguang@kylinsec.com.cn&gt; - 72.1-7" date="1707048000">- icu already supports loongarch64 architecture
- Remove loongarch64 patch and modify sw_64 support patch to use all arch</changelog>
  <changelog author="zhangpan&lt;zhangpan103@h-partners.com&gt; - 72.1-8" date="1753963200">- fix CVE-2025-5222</changelog>
</package>
<package pkgid="536a1de76d23cbba41d65f0a6e47cc770d53f5951768ddd33096c83a09a3560e" name="iniparser" arch="aarch64">
  <version epoch="0" ver="4.1" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-6" date="1741348800">- Fix CVE-2025-0633</changelog>
</package>
<package pkgid="10939c4c91df2917d55d2f02396f329060d169a9ffa126ca68777b263ee63228" name="iniparser-debuginfo" arch="aarch64">
  <version epoch="0" ver="4.1" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-6" date="1741348800">- Fix CVE-2025-0633</changelog>
</package>
<package pkgid="26b574b969b052e8ef277314ed2b401c828b63ea3a82e7398aff7647e24bc1af" name="iniparser-debugsource" arch="aarch64">
  <version epoch="0" ver="4.1" rel="6.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-5" date="1687694400">- Fix CVE-2023-33461</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 4.1-6" date="1741348800">- Fix CVE-2025-0633</changelog>
</package>
<package pkgid="e88b19a1bc33b12f47f0116e88164fe35f7cd8b90d8f3d529ccc9ec185310bf9" name="initscripts" arch="aarch64">
  <version epoch="0" ver="10.17" rel="3.oe2203sp4"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 10.17-3" date="1707825600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rename_device: free path after it is used</changelog>
</package>
<package pkgid="ef92c8ee21d9f7ade432f55ad7ce221bab92e4f5c4ed9685e0e4f91ee3e262da" name="initscripts-debuginfo" arch="aarch64">
  <version epoch="0" ver="10.17" rel="3.oe2203sp4"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 10.17-3" date="1707825600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rename_device: free path after it is used</changelog>
</package>
<package pkgid="892309a79d1cb3684a43fba29165da8d4d037eade7b08b754459c8516ac45310" name="initscripts-debugsource" arch="aarch64">
  <version epoch="0" ver="10.17" rel="3.oe2203sp4"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 10.17-3" date="1707825600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rename_device: free path after it is used</changelog>
</package>
<package pkgid="15c7e88499add170801f410b7cc945df670c77466f88c6dc6c7ee1f92db5df4c" name="initscripts-service" arch="noarch">
  <version epoch="0" ver="10.17" rel="3.oe2203sp4"/>
  <changelog author="xingwei &lt;xingwei14@h-partners.com&gt; - 10.12-2" date="1656590400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Initscripts no looger care about rc.local</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 10.12-3" date="1664452800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:remove redundant provide for service cmd and delete unnecessary obseletes to fix upgrade problem</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-1" date="1665748800">- Type:requirement
- ID:NA
- SUG:NA
- DESC:update initscripts to 10.17-1</changelog>
  <changelog author="gaihuiying &lt;eaglegai@163.com&gt; - 10.17-2" date="1676894400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:delete Requires:dbus-tools</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 10.17-3" date="1707825600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rename_device: free path after it is used</changelog>
</package>
<package pkgid="871db527338f208dd9a62edbcc67d44ce2d9fe8cb9bb8321e61b59774e3d1818" name="iotop" arch="noarch">
  <version epoch="0" ver="0.6" rel="28.oe2203sp4"/>
  <changelog author="Mingzheng Xing &lt;xingmingzheng@iscas.ac.cn&gt; - 0.6-25" date="1694952000">- riscv: Add riscv64 support</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 0.6-26" date="1719921600">- loongarch64: add loongarch64 support</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; -0.6-27" date="1732017600">- Fix crash when hide UI elements on smaller terminals</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; - 0.6-28" date="1734436800">- Fix the iotop crash caused by non-UTF-8 characters</changelog>
</package>
<package pkgid="ce2b74af6e74c222907aae1ad49a003d65b7c1be6893a746728e86db362a0482" name="iotop-help" arch="noarch">
  <version epoch="0" ver="0.6" rel="28.oe2203sp4"/>
  <changelog author="Mingzheng Xing &lt;xingmingzheng@iscas.ac.cn&gt; - 0.6-25" date="1694952000">- riscv: Add riscv64 support</changelog>
  <changelog author="cenhuilin &lt;cenhuilin@kylinos.cn&gt; - 0.6-26" date="1719921600">- loongarch64: add loongarch64 support</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; -0.6-27" date="1732017600">- Fix crash when hide UI elements on smaller terminals</changelog>
  <changelog author="lvyy &lt;lyunmail@163.com&gt; - 0.6-28" date="1734436800">- Fix the iotop crash caused by non-UTF-8 characters</changelog>
</package>
<package pkgid="ec88c2ae2974acfbe75cb7ababc979a4f13bd66f7f3849626ce2dd05546dc1bf" name="iperf3" arch="aarch64">
  <version epoch="0" ver="3.18" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
</package>
<package pkgid="ccf7b58fcc675ad1932c89228b778ce4aa45c6d7b41a25173ecd66b832a9aa44" name="iperf3" arch="aarch64">
  <version epoch="0" ver="3.18" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 3.18-2" date="1754308800">* Fix CVE-2025-54349 CVE-2025-54350.patch</changelog>
</package>
<package pkgid="fca254ab2c42fe11853437bcebd44d554601ab70d0c4498c7541c7967d70217f" name="iperf3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.18" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
</package>
<package pkgid="6a5021097f5e4cc777019f4590fed3e432305f0071a6eeab0b9df3131cc8bf59" name="iperf3-debuginfo" arch="aarch64">
  <version epoch="0" ver="3.18" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 3.18-2" date="1754308800">* Fix CVE-2025-54349 CVE-2025-54350.patch</changelog>
</package>
<package pkgid="b136b98c9bf551a3f18b2e811f9efca89cb4ef0bb2f2cdf4a5666f012f0da889" name="iperf3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.18" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
</package>
<package pkgid="c53ad13a777d7ec9f732ea92670eada93a41dc74121d638b6a5baea02320ac36" name="iperf3-debugsource" arch="aarch64">
  <version epoch="0" ver="3.18" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 3.18-2" date="1754308800">* Fix CVE-2025-54349 CVE-2025-54350.patch</changelog>
</package>
<package pkgid="acc06862c64facdb56b13f0c10b28d1dc0109a59ede19ef66cf616d3dffbb372" name="iperf3-devel" arch="aarch64">
  <version epoch="0" ver="3.18" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
</package>
<package pkgid="0f69efce81d5c974293b42e9102de4d1c888a89864e9615f2f1874185d5d4343" name="iperf3-devel" arch="aarch64">
  <version epoch="0" ver="3.18" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 3.18-2" date="1754308800">* Fix CVE-2025-54349 CVE-2025-54350.patch</changelog>
</package>
<package pkgid="e0e1f98fc21a2ba5d1bbc0e4a3818bd7766ef299dbfc632cbb43ebfa77b2f47e" name="iperf3-help" arch="noarch">
  <version epoch="0" ver="3.18" rel="1.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.10.1-3" date="1691409600">- Fix CVE-2023-38403</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
</package>
<package pkgid="61677f7a4195946bfc7119e7aa4e561c8c256d971c61a212d26462a9ba9d0a43" name="iperf3-help" arch="noarch">
  <version epoch="0" ver="3.18" rel="2.oe2203sp4"/>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.16-1" date="1712059200">- Upgrade to 3.16 for fix CVE-2023-7250</changelog>
  <changelog author="jinzhiguang &lt;jinzhiguang@kylinos.cn&gt; - 3.16-2" date="1714392000">- add BuildRequires and Requires to enable sctp option</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.16-3" date="1715688000">- Fix CVE-2024-26306</changelog>
  <changelog author="zhangxingrong &lt;zhangxingrong@uniontech.com&gt; - 3.16-4" date="1717675200">- iperf3 now builds correctly on architectures without native support for 64-bit atomic types, by linking with the libatomic library</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 3.17.1-1" date="1720526400">- Update to 3.17.1
- iperf3 no longer changes its current working directory in --daemon mode. This results in more 
  predictable behavior with relative paths, in particular finding key and credential files for authentication.
- A new --json-stream option has been added to enable a streaming output format, consisting of 
  a series of JSON objects (for the start of the test, each measurement interval, and the end of the test) separated by newlines
- UDP tests now work correctly between different endian hosts
- The --fq-rate parameter now works for --reverse tests
- The statistics reporting interval is now available in the --json start test object</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-2" date="1727352000">- Relocate patches from upstream communities to fix thread duplicate recycling issue.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-3" date="1727611200">- Relocate patches from upstream communities to fix incorrect freeaddrinfo call.</changelog>
  <changelog author="jiangjixiang &lt;jiangjixiang@kylinos.cn&gt; - 3.17.1-4" date="1727611201">- Relocate patches from upstream communities to performance enhancement for iperf_time_add().</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 3.18-1" date="1734955200">- Update to 3.18 for fix CVE-2024-53580</changelog>
  <changelog author="yujingbo &lt;yujingbo@kylinos.cn&gt; - 3.18-2" date="1754308800">* Fix CVE-2025-54349 CVE-2025-54350.patch</changelog>
</package>
<package pkgid="51c3f25f1d50c409da727c59a5f9a81d85308f560360aaa5b24c2ff370d113d5" name="iproute" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="21.oe2203sp4"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
</package>
<package pkgid="577e6507653d0bd98238475739ab9bbc9ecf223d57b0d8767851a3b28bdbbfbd" name="iproute" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="22.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
</package>
<package pkgid="a9f97b06febde109302bb6b31c1beeb0fccf96eb893fbe78c353914dbbdb63fa" name="iproute" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="24.oe2203sp4"/>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
  <changelog author="chenhao &lt;chenhao418@huawei.com&gt; - 1:5.15.0-23" date="1742817600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: unblock mnl_socket_recvfrom if not message received</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:5.15.0-24" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix fd leak when playing with netns</changelog>
</package>
<package pkgid="7981e6161aedae1101efc7f630ba6f212acef89146da5eab1659d36ce2cc3703" name="iproute-debuginfo" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="21.oe2203sp4"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
</package>
<package pkgid="f38e4fcec25d5f7bd345f27277d8134b969b77fb3a5c6821ea7e96eac18be695" name="iproute-debuginfo" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="22.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
</package>
<package pkgid="1fdf6ea65f2eb4bb8aba9e5928fa7cf356ec8bb5a8ef9494f57ee3893549c497" name="iproute-debuginfo" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="24.oe2203sp4"/>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
  <changelog author="chenhao &lt;chenhao418@huawei.com&gt; - 1:5.15.0-23" date="1742817600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: unblock mnl_socket_recvfrom if not message received</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:5.15.0-24" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix fd leak when playing with netns</changelog>
</package>
<package pkgid="f5a471f4155a23b2b211d4dc5568db9f8219506871e69dbffa1bd0c2512d2e9b" name="iproute-debugsource" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="21.oe2203sp4"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
</package>
<package pkgid="7e743ff995bd5e2ef0a2bf4a715316cf31f7067d6bdb272960ed93bf3f1c99ba" name="iproute-debugsource" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="22.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
</package>
<package pkgid="803a15acad454300d289235cef7224f46a4108f575187b31ad76a0c0af3bf0d0" name="iproute-debugsource" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="24.oe2203sp4"/>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
  <changelog author="chenhao &lt;chenhao418@huawei.com&gt; - 1:5.15.0-23" date="1742817600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: unblock mnl_socket_recvfrom if not message received</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:5.15.0-24" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix fd leak when playing with netns</changelog>
</package>
<package pkgid="16acf0088e03598f18cfda48bfb048e5e1506d28f9fb7a0c954c43b679045679" name="iproute-devel" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="21.oe2203sp4"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
</package>
<package pkgid="cfab48a1becdd88d27b7b9830ed4ec66f0300174de1b816c6e43ddc05a974392" name="iproute-devel" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="22.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
</package>
<package pkgid="f2cd7a7becc8dd6044d9de05ff75dff19492586f76b0d1c6d6bb95a255d92f9f" name="iproute-devel" arch="aarch64">
  <version epoch="1" ver="5.15.0" rel="24.oe2203sp4"/>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
  <changelog author="chenhao &lt;chenhao418@huawei.com&gt; - 1:5.15.0-23" date="1742817600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: unblock mnl_socket_recvfrom if not message received</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:5.15.0-24" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix fd leak when playing with netns</changelog>
</package>
<package pkgid="54fcab09a941b9c9b647f4095ec61bd75aede232288012b5217b3989b08ecfe1" name="iproute-help" arch="noarch">
  <version epoch="1" ver="5.15.0" rel="21.oe2203sp4"/>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-12" date="1676635200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:add BuildRequire for make to fix build failure</changelog>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
</package>
<package pkgid="a5569aea352ef8ec9bd8da040879d38dbcbefbf4e01e2a67625f984d09ea8017" name="iproute-help" arch="noarch">
  <version epoch="1" ver="5.15.0" rel="22.oe2203sp4"/>
  <changelog author="jiangheng &lt;jiangheng14@huawei.com&gt; - 1:5.15.0-13" date="1677758400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix ip netns attach failed</changelog>
  <changelog author="gaoxingwang &lt;gaoxingwang1@huawei.com&gt; - 1:5.15.0-14" date="1692273600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ipnetns: fix fd leak with 'ip netns set'
       iproute2: optimize code and fix some mem-leak risk
       iproute_lwtunnel: fix array boundary check
       iproute_lwtunnel: fix possible use of NULL when malloc()
       m_action: fix warning of overwrite of const string
       netem: fix NULL deref on allocation failure
       nstat: fix potential NULL deref
       rdma/utils: fix some analyzer warnings
       rt_names: check for malloc() failure
       tc/prio: handle possible truncated kernel response
       tc_exec: don't dereference NULL on calloc failure
       tc_util fix unitialized warning
       iptunnel: detect protocol mismatch on tunnel change
       ipmaddr: fix dereference of NULL on malloc() failure</changelog>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
</package>
<package pkgid="23d3be024454880b0ab69af07ab589aff8aa1fb8ae0366a42c90829a322c76ac" name="iproute-help" arch="noarch">
  <version epoch="1" ver="5.15.0" rel="24.oe2203sp4"/>
  <changelog author="mufengyan &lt;mufengyan@hisilicon.com&gt; - 1:5.15.0-15" date="1700913600">- Type:feature
- ID:NA
- SUG:NA
- DESC:This patch adds ARPHRD_UB for iproute2 and support name
       parse for it and deletes the display of vf address
       information in the pf</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-16" date="1701086400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: sync ipvlan_mode enum with kernel-headers</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-17" date="1701086401">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:libnetlink: Fix memory leak in __rtnl_talk_iov()
       tc: ct: Fix invalid pointer dereference
       tc_util: Change datatype for maj to avoid overflow issue
       tc_util: Fix no error return when large parent id used
       xfrm: prepare state offload logic to set mode</changelog>
  <changelog author="liubo &lt;liubo335@huawei.com&gt; - 1:5.15.0-18" date="1705060800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:f_flower: Treat port 0 as valid
       ip: error out if iplink does not consume all options
       iplink_bridge: fix incorrect root id dump
       ss: change aafilter port from int to long (inode support)
       ss: Fix socket type check in packet_show_line()
       ss: print unix socket "ports" as unsigned int (inode)
       Add utility to convert an unsigned int to string
       Add get_long utility and adapt get_integer accordingly
       utils: fix get_integer() logic</changelog>
  <changelog author="liweigang &lt;liweiganga@uniontech.com&gt; - 1:5.15.0-19" date="1713268800">- Type: bugfix
- ID: NA
- SUG: NA
- DESC: lnstat: Fix deref of null in print_json() function
        iproute2: prevent memory leak
        libnetlink: validate nlmsg header length first
        tc: remove tcindex classifier
        ip: fix memory leak in 'ip maddr show'
        ila: fix potential snprintf buffer overflow
        bridge: fix potential snprintf overflow
        mnl_utils: sanitize incoming netlink payload size in callbacks</changelog>
  <changelog author="caokeming &lt;caokeming@huawei.com&gt; - 1:5.15.0-20" date="1721995200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ctrl: Fix fd leak in ctrl_list()
       ctrl: Fix fd leak in ctrl_listen()
       devlink: use snprintf instead of sprintf</changelog>
  <changelog author="liningjie &lt;liningjie@xfusion.com&gt; - 1:5.15.0-21" date="1728475200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: Fix error reporting when accessing "dcb app"</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 1:5.15.0-22" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:ss: fix expired time format of timer
       route: filter by interface on multipath routes
       lib: names: check calloc return value in db_names_alloc</changelog>
  <changelog author="chenhao &lt;chenhao418@huawei.com&gt; - 1:5.15.0-23" date="1742817600">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:dcb: unblock mnl_socket_recvfrom if not message received</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1:5.15.0-24" date="1744718400">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix fd leak when playing with netns</changelog>
</package>
<package pkgid="3d8b26b0ef80cb6f9b783b354d8a4f25f3d4d702a2f47a7feaba941cdeead512" name="iptraf-ng" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.2.1-4" date="1732881600">- Type:CVE
- CVE:CVE-2024-52949
- SUG:NA
- DESC:fix CVE-2024-52949</changelog>
</package>
<package pkgid="a81ad9dddf5953c5ecbd5ef0159059e5d1faa19f71b0d0797f800d8e95da7fb1" name="iptraf-ng-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.2.1-4" date="1732881600">- Type:CVE
- CVE:CVE-2024-52949
- SUG:NA
- DESC:fix CVE-2024-52949</changelog>
</package>
<package pkgid="791a53514b7fd8d2c7cdc398f61493ed19ff31c75543a0c69752e716b8650a23" name="iptraf-ng-debugsource" arch="aarch64">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.2.1-4" date="1732881600">- Type:CVE
- CVE:CVE-2024-52949
- SUG:NA
- DESC:fix CVE-2024-52949</changelog>
</package>
<package pkgid="c3db220b062fd2ba1a7f64e4c03ac9874c1d6bf0f15dda452a604c0cd69e3b17" name="iptraf-ng-help" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="4.oe2203sp4"/>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 1.2.1-4" date="1732881600">- Type:CVE
- CVE:CVE-2024-52949
- SUG:NA
- DESC:fix CVE-2024-52949</changelog>
</package>
<package pkgid="9248e48fdc8f7f33d6fca88df52ef044195f8ef34feda58f186079a0cf4c35eb" name="iputils" arch="aarch64">
  <version epoch="0" ver="20221126" rel="6.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="f780cd0cd2b4b449e9a9039b3f290f377652a5e77b539382fc8056309f1b1af9" name="iputils" arch="aarch64">
  <version epoch="0" ver="20221126" rel="7.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20221126-7" date="1753444800">- Type:cves
- CVE:CVE-2025-47268
- SUG:NA
- DESC:fix CVE-2025-47268</changelog>
</package>
<package pkgid="7399d41d51329811c4d4dcbe684933bc3f8b5c96040d8e13d0d9bed8f91ad1b2" name="iputils-debuginfo" arch="aarch64">
  <version epoch="0" ver="20221126" rel="6.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="97d36f59d6147c0a5c6103c55ef0e9da4cc4f446aeb2252dbb1ece4fbf4f948c" name="iputils-debuginfo" arch="aarch64">
  <version epoch="0" ver="20221126" rel="7.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20221126-7" date="1753444800">- Type:cves
- CVE:CVE-2025-47268
- SUG:NA
- DESC:fix CVE-2025-47268</changelog>
</package>
<package pkgid="f4f93d6f2663a92a968748a581eef227cb427d53edbd76988b029ff91623e405" name="iputils-debugsource" arch="aarch64">
  <version epoch="0" ver="20221126" rel="6.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="9a243dc320336266e32b968767efc377d1b1cfbf09cf81ed8d7b6d7ed2d84d0e" name="iputils-debugsource" arch="aarch64">
  <version epoch="0" ver="20221126" rel="7.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20221126-7" date="1753444800">- Type:cves
- CVE:CVE-2025-47268
- SUG:NA
- DESC:fix CVE-2025-47268</changelog>
</package>
<package pkgid="dcc8ae9ef4ac564c904a344abc0434c4679ed2ce746b863a4861fdfd92c624e7" name="iputils-help" arch="noarch">
  <version epoch="0" ver="20221126" rel="6.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-1" date="1678276800">- Type:requirements
- ID:NA
- SUG:NA
- DESC: update iputils to 20221126</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-2" date="1685188800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix clockdiff host is down bug</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-3" date="1685620800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Obsoletes for ninfod</changelog>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
</package>
<package pkgid="40494d9c9b750b1300ba3d55c8aef9b525aff7406504299f32507bd3f1016819" name="iputils-help" arch="noarch">
  <version epoch="0" ver="20221126" rel="7.oe2203sp4"/>
  <changelog author="zhongxuan &lt;zhongxuan2@huawei.com&gt; - 20221126-4" date="1694779200">- Type:bugfix
- ID:NA
- SUG:NA
- DESC: backport two patches</changelog>
  <changelog author="suhai &lt;sunhai10@huawei.com&gt; - 20221126-5" date="1714132800">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some pathes from upstream</changelog>
  <changelog author="yanglu &lt;yanglu72@h-partners.com&gt; - 20221126-6" date="1739448000">- Type:bugfix
- ID:NA
- SUG:NA
- DESC:sync some patches from upstream</changelog>
  <changelog author="xinghe &lt;xinghe2@h-partners.com&gt; - 20221126-7" date="1753444800">- Type:cves
- CVE:CVE-2025-47268
- SUG:NA
- DESC:fix CVE-2025-47268</changelog>
</package>
<package pkgid="fbfa9a7554025bd5a412a5b2732676d8b19310e04dffe2c96f136f202d3b076a" name="iso-codes" arch="noarch">
  <version epoch="0" ver="4.7.0" rel="3.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 4.15.0-1" date="1698148800">- Upgrade to version 4.15.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 4.7.0-2" date="1699963200">- revert version to 4.7.0-2
- Large differences between versions 4.15.0 and 4.7.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.7.0-3" date="1744459200">- rename Chinese translation of iso_639-5</changelog>
</package>
<package pkgid="6a33792847d8cc7c57ebf9b3fc7f529ca7c47b3e6ca65f52563bb18fa9086fa7" name="iso-codes-devel" arch="noarch">
  <version epoch="0" ver="4.7.0" rel="3.oe2203sp4"/>
  <changelog author="yixiangzhike &lt;yixiangzhike007@163.com&gt; - 4.15.0-1" date="1698148800">- Upgrade to version 4.15.0</changelog>
  <changelog author="fuanan &lt;fuanan3@h-partners.com&gt; - 4.7.0-2" date="1699963200">- revert version to 4.7.0-2
- Large differences between versions 4.15.0 and 4.7.0</changelog>
  <changelog author="Funda Wang &lt;fundawang@yeah.net&gt; - 4.7.0-3" date="1744459200">- rename Chinese translation of iso_639-5</changelog>
</package>
<package pkgid="7bfd174c265c81202a41e8de788fca206029eb6e4790421ed550e850691b2d9f" name="jakarta-mail" arch="noarch">
  <version epoch="0" ver="1.6.7" rel="4.oe2203sp4"/>
  <changelog author="xuyishen &lt;xuyishen3@huawei.com&gt; - 1.6.7-4" date="1753876800">- Fix CVE-2025-7962</changelog>
</package>
<package pkgid="72d897e944f0064144d61c8ce712bc9245f85370a16f491a3049f6d45340c261" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="721c98f468bd5de39f664855a882e637a96ce13b37334ddd0e77422850576621" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="91b5aec9ffe8007381f82e112516dd43d5f37bc80ba22c8427aa9746d3723c5b" name="java-1.8.0-openjdk" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="9ebd89a6e746d6ca6cae18f410b026630ee3a6492d727264fbe83974ceedcfa6" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="2c8a349792a816ad442e146444e2472d47bca0e09f641cd5f9e4906f2354d154" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="6a03e6042dde2cfda269c7f69db7a163994dd5a3da4f6da259ee3242b60a6e25" name="java-1.8.0-openjdk-accessibility" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="c82c053aba8caea44ceb60565e87a93da8dd06d55e65a16bccdb0455d5545c90" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="ee7177b491c014ceb976559880b72589a605601c1cefbcb60d8d1ec18c6d2f1f" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="43a2a073803ec8f85f7b8e9010af6ce3c08171afa56f854ea85171332f0d676b" name="java-1.8.0-openjdk-accessibility-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="535224385bc584f1091ee3cf5936957175ae37b81e8b60ebd62cdbeae6a8a5d0" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="ece31fe4d6930a5276fa0f1b5258b70104ed6a63fc397a8fb1f348a4ab6ca7db" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="d6a74c3b71f7b91f71b75384a026d8c39c84e2922437afc0e2105663746056bd" name="java-1.8.0-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="2b85941b321ad366255776b21568188f7772a2831bc9a3dab4286a8a4e4f5293" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="c36cbb867d6d42e6738466ec5da184f05b664cc6209c8d391d5de3d82e5614df" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="8dafb06d40a708ec5cc27fe97c0c19d2f1e7ba8ac0bd9430cf568a18702c33a1" name="java-1.8.0-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="8b036344ee8ea0ce44b142975a149bf01bb220f1086d0feb483ce6fc31ff0e9a" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="49c3ce705b8139e8811514faa4c7a9fc1b1c1be72e12ebf3aa361c7d9d71b078" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="ea8d3961c006ba98271461c47d0c89cc112b41780e231aa3aba597cc75bd3e7f" name="java-1.8.0-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="01f1cc5f2f549905d52ad9ab578c17943da8882e050d80c057ea146051919828" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="dfeea7a70bb398252a8e7eab493cb3a67b3ab06d0c4e193ab9da635a50efae4f" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="9a2651c88170d1b8fddc0d1d9a9a7fa290dcc74e75fa27b83bf102a45064ea14" name="java-1.8.0-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="4853362c9d6c3acf777e1bea2e0d8b705ccfe99c797aa1e08a81179cce7bd792" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="d17ac738a5b65e91ce1080bcb372dbbbfd8cc54f7670b583eb51866fdf2a016c" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="e0fe345b7bd23d01c5ea26e98ec676182c90c7276b18d224968369a750b70fc1" name="java-1.8.0-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="18fc8731ab31eec2f9a497c946a949afd8375838c06c588a20b76b77e7779e53" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="635dc0b10516187d110dc37defccbe9df558f17fb37709fbd414ffb429c4a3c5" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="c0a383d354bbe68481808a8560bc26649e20b48d69509191a4627e5f1f7ea2fb" name="java-1.8.0-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="289f4c6c019ddabf48eb0b7d97776d9da782273f64e00665c42e2a5573164d7e" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="36e582c0d397c5fb1c3268562f39a3e3215eebab4726e5b24547b7a366444f4b" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="5aea324a4bc59578e98735d8a74087a491dc35a34b8d178813deb8bf2d02990c" name="java-1.8.0-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="7a25475b2394575bbe10f6e01cf38d8270b42e53429fe1dbaeef40e6e417b681" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="fda06deb45263b4981c250f4334abf84d64925cc41e308d3842516b226180ac8" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="523c326c94e9e4806b5173f28d8635ccd11d2bf732bc289d1cd16f26335b6c16" name="java-1.8.0-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="b7da4ec884b2887044b0b59e03929f59e7c48c9733b67b332dbe68ca8aa76699" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="9f6f777317718b645db037a06af5f12ea2350eb6a7390e38ce7414da9a2aca58" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="e475d644856fbb04d56a0cfd7dd59c947061b6ef024973591fafcbe6ce56a3e5" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="b705419055a04cd079be225763dbdbe589024ba870a5e3ac029d230870ce4f4c" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="3414799ed9e62bd14ca256675499d017fad8c45f28aa0c59b97417794d2cc4ca" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="99f4ec73ed8efda4df0fc636353a9df0531374594a0137215520f2cffd8e44ba" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="e5624a36f85228f399452726e1e452d9c7cdb391e39e7824073fc9bc9ed98e73" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="e65c8b409271f73702b8a81e37f8a3a9fa2b4839410e5db107766acf7a54ce22" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="063809ce8642e09a26a657f195eaf5f356032a2be1e7733e7f70bd41f1ffe8ce" name="java-1.8.0-openjdk-openjfx" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="5a4cf72d34353444e65eb0dc60f94dd5ab960d16cbb84f239df142b3c1e4e1eb" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="097b1249077b8938457309fa3bdfa56d3960478a6cdd4915c1ac80b9c8d0f3b9" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="1ce268f11a942949bb799057298e6673eab6000822a66c9c1aefe8d9122a9871" name="java-1.8.0-openjdk-openjfx-devel" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="fdf21c5c3e5c2cbe5583f99987c56176c8081eb22a728444cd5a801ab01600cd" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="5c04fe0e2db65653eb0e824208bb403fa636aaaae5e7dc410fa85a46a88a418b" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="5922aea5c74d6065e69e65f575232721fbdec9baf6ebb4392a803916f9d8f1f4" name="java-1.8.0-openjdk-openjfx-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="1fd5c8beae9ef2270aba4fe397552133314cbd0d429c4050c2639594893a2df8" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="9e76f5b6267ecfc26da6fad2df26940c9347a9a39238882afda72b0bb360459e" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="2ea5eb41af83cadb84a665f1aa4aa172fc9f5a66144d1b78fdbdd90533df9564" name="java-1.8.0-openjdk-openjfx-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="0489a72634a8d500383f565cce5a23d6af24b9945368ab4d096e9bc62f78e97a" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="f738a916cc7479a23730a177258c28b81ef84aa3b58edcaaa1548eb7b016664e" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="0ed901f3cccdf540e36834f087ce709fdb83a6b4eda19f8ed1ff2b186af116fb" name="java-1.8.0-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="410d441a815861390f534cbe0d5fe620324d9dea3c51058d4006d13352ffb2e6" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="26a7817f772bdcb885e376b8a23c5c5f490dcb44082016c707cb19c36d81f128" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="bbb8506029ad7166f5dec38fdbdac1b15645440d404ee1f498479460efca1f35" name="java-1.8.0-openjdk-src" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="520676f47fe3a7339a3b118ef8684aeece1b197be515b1e33a91dab22a2e76bf" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.422.b05" rel="0.oe2203sp4"/>
</package>
<package pkgid="5ccff058d0015fdb5c4c07cfed69e9ddf38aa26881af6e7aad8931128358d705" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.432.b06" rel="0.oe2203sp4"/>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.3" date="1722340800">- Fix-the-ActiveProcessorCount-function-of-the-spark-s.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.422-b05.4" date="1722686400">- Add 8137165-Tests-fail-in-SR_Handler-because-thread-is-n.patch
- Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch</changelog>
  <changelog author="benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.5" date="1722945600">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; -1:1.8.0.422-b05.6" date="1723032000">- let support-KAE-zip.patch not install libz.so on loongarch64
- update LoongArch64 port to 8u422
- fix changelog date error</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; -1:1.8.0.422-b05.7" date="1724155200">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.8" date="1724932800">- Fix build on riscv64 in prep stage for 8u422</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432-b05.rolling" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch</changelog>
</package>
<package pkgid="b6a20fee10c1beb70f5667d5f16545d166f9fadf9424fde2b9f37efdfcf3efbb" name="java-1.8.0-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="1.8.0.452.b09" rel="2.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; -1:1.8.0.422-b05.9" date="1725278400">- Fix build error on riscv64 because of patch438</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; -1:1.8.0.422-b05.10" date="1725451200">- Support KAE Zip
- rename Bisheng to BiSheng</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.422-b05.11" date="1725624000">- add Enhance-SIGBUS-and-rlimit-information-in-errlog.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.432.b06-1" date="1729166400">- modified 8014628-Support-AES-Encryption-with-HMAC-SHA2-for-Ke.patch
- modified 8193682-Infinite-loop-in-ZipOutputStream.close.patch
- modified 8313626-C2-crash-due-to-unexpected-exception-control.patch
- modified Backport-8318889-Backport-Important-Fixed-Issues-in-Later-Ver.patch
- modified GCC-12-reports-some-compiler-warnings.patch
- modified add-missing-test-case.patch
- modified fix_X509TrustManagerImpl_symantec_distrust.patch
- modified update-cacerts-and-VerifyCACerts.java-test.patch
- deleted 8278794-Infinite-loop-in-DeflaterOutputStream.finish.patch
- add Backport-8057910-G1-BOT-verification-should-not-pass.patch
- add Backport-8069330-and-adapt-G1GC-related-optimization.patch
- add SA-redact-support-password.patch</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; -1:1.8.0.432.b06-2" date="1735992000">- modified add-Fix-aarch64-runtime-thread-signal-transfer-bug.patch
- add 8253072-XERCES-version-is-displayed-incorrect.patch
- add 8159461-8288556-getComponentType.patch
- add 8136926-phi-NULL-assert-in-PhaseIdealLoop-try_move_s.patch
- add 8269934-RunThese24H.java-failed-with-EXCEPTION_ACCES.patch</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; -1:1.8.0.442.b06-0" date="1737547200">- modified add-missing-test-case.patch</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.com&gt; -1:1.8.0.442.b06-1" date="1742299200">- Add sw64 architecture support to 8u442</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; -1:1.8.0.452.b09-0" date="1744891200">- update to 8u452
- modified add-missing-test-case.patch
- modified GCC-12-reports-some-compiler-warnings.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; -1:1.8.0.452.b09-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; -1:1.8.0.452.b09-2" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="33fd9ca1e73d4234d5a6a9b77fe98533e9c41bd8e52495ae24ae7e9098c9b691" name="java-11-openjdk" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="6da320ab2421a971edf4d9d447823166d13f847e9b1781f951b2751ff1a2e382" name="java-11-openjdk" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="81c7805fa7df7441cc7eb5b106ff3785b0d69df1b4860a84ff8b9283ef0db9b3" name="java-11-openjdk" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="db48041a295121d97aa00977c3e2b7864821dce149aad33997fc1590ba6c09e3" name="java-11-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="afda01ca05b5ba3f32c65f43fd9b09426fc719c61068fc49fc21f5279c103a5b" name="java-11-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="5af6b7595d9f8c7da78f1d1f6f6a4928e2a43c284da16ed46e0eb4e8d592b5e0" name="java-11-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="3ef9a5296b9356ac4bb07d23ee296e60c5b0f5db8a98afe58b4e767f18f7c0b0" name="java-11-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="564df41379b3ee0a1a6fe9923114ff6de366147b3c82e8684a8fd10961457991" name="java-11-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="3c817c8e6530a614dff7f89f78efb14a93bdcb18f6e3a30912f35803b08dc257" name="java-11-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="bf8597477708b57a33a39bf7c7c34448fd421205aaa73cf90a03b85d6f6caaf3" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="a3304b33c91e032c7676332b221974f88da5d0b726089343c160795b7216d647" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="6804464ff99e7e80b0ce86c3c82d59c3060203f9e5fd4cd077bf0af091f1bd3a" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="3eb55347fe0b0db94eec6b1b859686985b7ad9346916b09aa8fde88a18f88274" name="java-11-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="95854eefd237c879d4f0a98ed9a9513b22ee9e99d45af688dbc4e4186ae69a8d" name="java-11-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="9ba7c5f888a9a8bd51929c7104e8d9dff45c78491a3447907626b703929fda05" name="java-11-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="4cdc20ca7c38af1ff479d645db7893e58ec45e248a4612fe38e3af079e492886" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="71c2a686fafcc8562dcc7a80ff31b4f53bf1c034d6a48896f565d2e8477b6216" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="09f822ad640981b6e0f2c32e65475d27bd28949b4bc6fdd97685dd6073556f47" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="4da085addf0d538de1fff949210963d713db724075636a084ea778f7dac482d7" name="java-11-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="432f57c06a6e225135f3e5f24c6fc25f4024b9c6dc44fe26682c369d6eb41f31" name="java-11-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="1ebe87eaccb46450fc6e1b05994c0a789feb42b7f33c1818609984e560c83cc3" name="java-11-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="41f475389659eeb7301e630537bfba51a3e0382235180ead2c9a2e468bd95d2e" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="394c8214ac4821a302c826a57a298c3b12a1c351c7db490045771a9dd870dbbc" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="bd593df3378c29f757f3f569308a5119ed4e50624c8ad433d830aefb0f99b0c7" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="48e1350e17977b5b839d353f6c875b42addc5440f76d91a8255d723bb74a8afa" name="java-11-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="2d0a95f780a7e924529210c30f02952cdcc6dfc4b2c645941377a591d2715a90" name="java-11-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="099745fdff549e27e631fafecc304ce57f3053c894971c75a223d8c64576ac46" name="java-11-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="79230ccf7f4cd6b7012bf4fd6fb598c50af28ddf232ce4835a53597606babdf0" name="java-11-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="7f12cfe0b52912e7d72005d4bf60ccb051a801db3bad2a1cbdd5285067b2dbe4" name="java-11-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="c8046897096656ca7587f60dedae5e5f583a784b0d6588504208ad8b88cfa01a" name="java-11-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="45b59557dd85497c87d6f12e907a604527590369d607a77ab8bd1a0c44c317f3" name="java-11-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="3284966b8a9010a4b9a31cc33a03ea4da13fcf1c8e1846db42c845e330d4b7bd" name="java-11-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="5708e3de90a3352e9677141abedc019a27034b94e3977d8a9bab38a6dc0d5ff4" name="java-11-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="fa28cc498b99f35c45b3d526442a872a2b63a9eb69faa1c4045d385e533089b6" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="e7795bdd993164df579c4571df89f02ce6660cd8234f75ebf210a1fdfbdf6cf5" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="7a2d41c7e6956c0f8ad6cacc581eaa5855070b88fb07ded3c10d4852fbf6a3e7" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="98df119822a936f2b447c9bb0e4afa40e05f4e7915ab15f8dbc9363aa8d8b443" name="java-11-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="ac766080470382a730f645b780dbf49cc84e80d161d981739da8c50efdcf898f" name="java-11-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="c61510c8c031dc15cf15bdb77715ab0f60a547a61a44eb94f9bffc35133fcc5c" name="java-11-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="e758da6c54ca9b8815ab20514ff43ecf42296b5d413b0ddbee6f8cdbcc6b9add" name="java-11-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="bf566afca3aaeff1181d3ed45046774e355de197884d396f416baf4214f41967" name="java-11-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="e1bf67b441e6504d77979b1e821ab0c42c5c044074a1c41ef4b79385876fd535" name="java-11-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="189001874bf35e2f6ff97a7c74149db2fb01c3008e38c9cf81bfb7bcb4704140" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="4f4a9be02f22364952540cee1132d893603090db0d775c07121dcfdb17db0d09" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="35d629d0277975f9296b67bb26740bffb390091d603b8cd4d709173d968eed66" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="32eedb908fd34f004ae1ec236c708d20bb27ca9d30ae8d24875c1ef3d00f08f7" name="java-11-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.24.8" rel="0.oe2203sp4"/>
</package>
<package pkgid="214a4c452d886b6b261801ebcdd2d39dc1e22a95f66453f88064e2589fdbf0d0" name="java-11-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.25.9" rel="3.oe2203sp4"/>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1.11.0.24.8-1" date="1721304000">- update riscv64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-2" date="1721736000">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-3" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1.11.0.24.8-4" date="1722254400">- modified delete_expired_certificates.patch</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1.11.0.24.8-5" date="1722513600">- update LoongArch64 port to 11.0.24</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1.11.0.24.8-6" date="1725019200">- update License</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-0" date="1729080000">- upgrade to 11.0.25+9(GA)
- change default ActiveProcessorCount only for HBase</changelog>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
</package>
<package pkgid="edf74fd9d93dab43435cc5759ba00bd290c65aad7a934db04988180fff2d52a1" name="java-11-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="11.0.27.6" rel="1.oe2203sp4"/>
  <changelog author="wuyafang &lt;wuyafang@huawei.com&gt; - 1:11.0.25.9-1" date="1729512000">- disable lto in spec
- add Provides: /usr/bin/jjs
- update license</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-2" date="1729684800">- update riscv64 port to 11.0.25</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:11.0.25.9-3" date="1730894400">- update LoongArch64 port to 11.0.25</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.25.9-4" date="1735300800">- Fix build error on docker for riscv64
- Fix bogus date in changelog</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:11.0.26.4-0" date="1737547200">- modified G1-iterate-region-by-bitmap-rather-than-obj-size-in.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:11.0.26.4-1" date="1739361600">- update riscv64 port to 11.0.26</changelog>
  <changelog author="eapen &lt;zhangyipeng7@huawei.com&gt; - 1:11.0.26.4-2" date="1741089600">- (tz) update Timezone Data to 2025a
- add jbolt feature</changelog>
  <changelog author="2025 swcompiler &lt;lc@wxiat.cn&gt; - 1:11.0.26.4-3" date="1743508800">- add sw64 port to 11.0.26</changelog>
  <changelog author="yangyingqing &lt;yangyingqing@h-partners.com&gt; - 1:11.0.27.6-0" date="1744891200">- update to 11.0.27+6(GA)
- delete 8347965-tz-Update-Timezone-Data-to-2025a.patch
- add fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:11.0.27.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
</package>
<package pkgid="865a22d9ced26a05e59ef0837ef5bfff67bf37d04295d07ba2c6d7de4d103bd4" name="java-17-openjdk" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="fc620adc4ecaa7053c89e64815dad1e67573ca7a791899187eb5303344f72bca" name="java-17-openjdk" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="d0aebea675da61ef4bc5828d9b669ce667bb1e58b91f47936eddb0377dd3e92b" name="java-17-openjdk" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="410bcd484d18ebd01644949e1e8baf3fb20ee9ff14d4ede50c34409e2f578e3f" name="java-17-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="c0033d431f611a7acdf8f69e848d803c22173a46b1e770b84aadb4cfc8e05636" name="java-17-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="0940132901fd55fc6a2672f1ac0c0d021d332089b90a5a486dea309194b9b2ca" name="java-17-openjdk-debuginfo" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="383d3fd804724f5d7f85b64cde82c46c81f094479be467682a842de719c2c504" name="java-17-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="dc750623983c34039431bcabef675f5da8ff6c1935c0e292aba074758d50b3f6" name="java-17-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="69c9098b4b60a744e0daf433a33c444a23dcd72f3ecb52505d9c8beac3deaff2" name="java-17-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="b85720894681a1b9b239a39308c4391ca84a5dec389fce144e5e0f48114ec8d2" name="java-17-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="d42c3d70b36cd075ef104408db61f090e9944968ba20ddfbd509febcd5f11559" name="java-17-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="64568d9a7e35f0653561703938806c733ec08b8eef9b381e38dbac44f35d4a56" name="java-17-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="2521bda2325d6b1c74a9fb024d51ce7fb5cf2dc839efdc8d0c65917313b484f6" name="java-17-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="8bb0ce804580a4b8013fbeafebbb0294907b5ac9a237e9580610798c4b443c60" name="java-17-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="2191de31ea1bacb63c6e6a28ffdd2fe3c65b619a640364421028199599b1bca9" name="java-17-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="57484807f76ae03c907f3c34779a8e36f50e53422ab6437df253b8372f868a5f" name="java-17-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="7b56fe148434ef935fa1960e11afe223784120e3ea1f629e16507acb8eed970e" name="java-17-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="ae368828242a3d1be3250abb69d949ee6a45809ac609e4586dd9426f89b1b020" name="java-17-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="1056a330f1fa12599531634197d49b9d5f34a93db8b6e2c326033f3db79f9e1e" name="java-17-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="82d6e4fd75bcafdf444a21e4cc8d667e65a2459cafd082236176afdf65711547" name="java-17-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="2b23f6fdc8684de020fc566d104a9bbf3cc0daad2360f57633346f2ff1f028de" name="java-17-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="82326131512d396da96b5cdafe3f24db446846d82a67d003ce1a722051b9dbe3" name="java-17-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="44d088a3460f10bc8a97dab3f6eca26794ec02efde224f6195244d85ab6ca75e" name="java-17-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="156688922d339ad2f6a1380375a281d1fe4776a98bc57b25141b314ee0c1695f" name="java-17-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="edcd43c8e6e2d03f6c5855a083333f7cdef4f2f7662776d5d82777fafc7c941f" name="java-17-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="a685bb97b0d8381b69d17e3903868459f3e9cce44ac03467061fc83612a9ddcc" name="java-17-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="56a6bb2eeff79a2397a28ae5b8218ce276ad8e228e776a5385ddd4446760d2bb" name="java-17-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="ffe94a332651da765b7b47bf7403d09f284fb917f26f1cbc4c2e446947651437" name="java-17-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="66e70b539ff8b556390d486196851e679d759f68a2e3f30aa6f014bffb77d793" name="java-17-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="381a51d85d3282569cd5d29e32d143ed76b044ea00695b4f151b26f981264a49" name="java-17-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="5c4cd1a952539b719b3bd1f6ffa256c74bf27b902ba8f3403501eb2eb62b64ce" name="java-17-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="f18457acdad7287f67e1e240f6e5eb953779c7a5f8142eaca212882f44796dbd" name="java-17-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="0c8abca1debefaf12f396086d8f4bebdc6263c2adbf8cc58c98ecf4fcbbedd48" name="java-17-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="fcbcbbc1b4349c0f5a3e7075391b4e756ba507d31f1dc4a11196a86c2a154ba6" name="java-17-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="8c94b002c43e4240024f7cde2883a9216f4d174cbb57a82f3609203749061965" name="java-17-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="da015a383aa663d7326345b7a634df45c8e0dac81351eb03bf210ef3aa79d187" name="java-17-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="d3a2ed8e13db982ad5789e02801a069b8e30a331f9959a44b776814b2663b036" name="java-17-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="7e365f6ed59b8d787b8710dc53b3f103e6d426938781297616bc06b03e823bdf" name="java-17-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="a0b3c0e63399f59fffcdb49d45e31c6507740e5b0671e12a325790c54d26d912" name="java-17-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="1026b1c9524ae97b1ca5ea491397e5b280f9f6f6da8ce53539db48ab86d29c95" name="java-17-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="b6d2f6f1081d0c40048a245c6d7c24d3ac7b5ca77bf7494d47fd803be48f488c" name="java-17-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="2cb9cfd6dce8948dea01b78fcad84b88b4c11a3bce397e3e396258cfff8b9e25" name="java-17-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="c12abace84ec6f5d32b418cd87341cc64dfbaa145489f37d91e293ebfddf64b4" name="java-17-openjdk-src" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="ed2441b4d7ed0214e1a58b533edd4c50b1348cd88f94522631736b775273beac" name="java-17-openjdk-src" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="136421ae7b1082db61a915ab3b60f75cdf949150652c600df380b6286c1c26a0" name="java-17-openjdk-src" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="f3268088e814cdc2819657427e4a257de99520059188c5feda800c0450cceb42" name="java-17-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.12.7" rel="0.oe2203sp4"/>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.9.8-2" date="1701086400">- Add vendor name</changelog>
  <changelog author="neu-mobi &lt;liuyulong.work@qq.com&gt; - 1:17.0.10.9-0.rolling" date="1705579200">- del 8168469-Memory-leak-in-JceSecurity.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-rep.patch
- del 8275509-ModuleDescriptor.hashCode-isn-t-reproducible.patch
- del 8285516-clearPassword-should-be-called-in-a-finally-.patch
- del 8312065-Socket.connect-does-not-timeout-when-profili.patch
- del 8313626-C2-crash-due-to-unexpected-exception-control.patch
- del 8314063-The-socket-is-not-closed-in-Connection-creat.patch
- del 8316576-com.sun.jndi.ldap.Connection.cleanup-does-no.patch
- modified 8253495-CDS-generates-non-deterministic-outpu.patch
- modified 8280872-Reorder-code-cache-segments-to-improv.patch
- modified add-version-txt.patch
- add Add-problemlist.patch
- add puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="Leslie Zhai &lt;zhaixiang@loongson.cn&gt; - 1:17.0.10.9-1" date="1708344000">- Rebase LoongArch64 patch</changelog>
  <changelog author="misaka00251 &lt;liuxin@iscas.ac.cn&gt; - 1:17.0.10.9-2" date="1708948800">- Remove riscv64 support patch, already upstreamed</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-0.rolling" date="1713441600">- del 8295068-SSLEngine-throws-NPE-parsing-CertificateRequ.patch
- modify puyuan-jdk17.0.9-patch.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-1" date="1715860800">- rewrite LoongArch64-support.patch to sovle error while applying this patch in prep stage
- fix loongarch vendor error and delete redundant vendor args</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:17.0.11.9-2" date="1718884800">- update LoongArch64 port to 17.0.11</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.11.9-3" date="1720094400">- add jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
</package>
<package pkgid="427a818c1218bb8d265b77deb0798991fab2527dd534655790bb53d591d8a99f" name="java-17-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.13.11" rel="2.oe2203sp4"/>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.11.9-4" date="1721131200">- null the arg to solve openjdk-headless install error</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.12.7-0" date="1721304000">- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- update to 17.0.12+7(ga)</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.12.7-1" date="1721908800">- update Loongarch support patch to fix the error while applying in prep stage
- delete redundant symbols while viewing spec file with vim that make it strange on highlight</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:17.0.12.7-2" date="1722686400">- add Huawei-Extending-the-IV-Length-Supported-by-KAEProvider-AES.patch
- add Backport-7036144-GZIPInputStream-readTrailer-uses-faulty-avai.patch</changelog>
  <changelog author="neu-mob &lt;liuyulong35@huawei.com&gt; - 1:17.0.12.7-3" date="1725019200">- Add some features: JBooster/KAE zip</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:17.0.12.7-4" date="1727092800">- Remove the KAE patch for riscv64 to fix build errors</changelog>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:17.0.12.7-5" date="1728907200">- Add Backport-of-JDK-8305680.patch
- Add Backport-of-JDK-8305937.patch
- Add 8338785-The-java.awt.datatransfer.SystemFlavorMap-FL.patch
- Add 8337982-Remove-dead-undef-assrt0n.patch
- Add 8337274-Remove-repeated-the-in-StyleSheet.create-Sma.patch
- Add 8335610-DiagnosticFramework-CmdLine-is_executable-co.patch
- Add Backport-of-8333088-ubsan-shenandoahAdaptiveHeuristi.patch
- Add Backport-of-8339351-Remove-duplicate-line-in-FileMap.patch
- Add Backport-of-8330191-Fix-typo-in-precompiled.hpp.patch
- Add Backport-of-8337712-Wrong-javadoc-in-java.util.Date-.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.13.11-0" date="1729080000">- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8264806-Backport-Graal-Compiler.patch
- modify Add-JBooster-Lazy-AOT-module.patch
- modify Apply-TBI-to-ZGC-of-JDK17.patch
- modify Backport-Important-Fixed-Issues.patch
- modify KAE-zip-Features.patch
- modify add-version-txt.patch
- add Huawei-Fix-JBooster-file-issue-caused-by-os-write-change.patch
- update to 17.0.13+11(ga)</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:17.0.13.11-1" date="1730376000">- add downgrade-fcntl64-to-fcntl-on-linux.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.13.11-2" date="1730894400">- upgrade LoongArch64 port to 17.0.13</changelog>
</package>
<package pkgid="b631a5bd63d0fd91ee983470ac63a43a6f23931dc84ec4970b1ff48a759a67fb" name="java-17-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="17.0.15.6" rel="4.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;benshuai5d@huawei&gt; - 1:17.0.14.7-0" date="1737633600">- update to 17.0.14
- modify 8264805-Backport-Ahead-of-Time-Compiler.patch
- modify 8280872-Reorder-code-cache-segments-to-improv.patch
- modify 8323066-TestSkipRebuildRemsetPhase.java-fails-with-S.patch
- modify Backport-Important-Fixed-Issues.patch
- modify add-version-txt.patch
- modify jdk17-Add-KAE-provider.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.14.7-1" date="1739275200">- upgrade LoongArch64 port to 17.0.14</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:17.0.14.7-2" date="1740139200">- fix LoongArch64 support patch apply error</changelog>
  <changelog author="swcompiler &lt;lc@wxiat.cn&gt; - 1:17.0.14.7-3" date="1742385600">- add sw64 architecture support to 17.0.14.7</changelog>
  <changelog author="Whitney33 &lt;shangqianli1@huawei.com&gt; - 1:17.0.14.7-4" date="1742990400">- fix condigure arguments, disable global lto</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-0" date="1744891200">- update to 17.0.15
- modified 8264805-Backport-Ahead-of-Time-Compiler.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:17.0.15.6-1" date="1745323200">- add Huawei-fix-potential-build-fail-in-jbolt.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:17.0.15.6-2" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="panxuefeng &lt;panxuefeng@loongson.cn&gt; - 1:17.0.15.6-3" date="1746705600">- upgrade LoongArch64 port to 17.0.15</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:17.0.15.6-4" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="7e8e967945afcfccaf3d76a9a91a28d765cc26425480c394f8e14e5a834b6444" name="java-21-openjdk" arch="aarch64">
  <version epoch="1" ver="21.0.7.6" rel="5.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.6.7-0" date="1737633600">- update to jdk21.0.6-ga
- delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
- delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
- delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
- delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
- delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
- delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
- delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
- modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
- modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:21.0.6.7-1" date="1739275200">- update LoongArch64 port to 21.0.6</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.6.7-2" date="1742644800">- add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- add huawei-Add-KAE-Provider.patch
- add huawei-Add-KAE-zip-feature.patch
- add huawei-Fix-arm32-build-failed-undefined-reference.patch
- add huawei-Add-Fast-Serialzer.patch
- add huawei-Add-Hashmap-frontCache-opt.patch
- add huawei-1-add-port-jbolt-feature.patch
- add huawei-heap-dump-redact-support.patch
- add huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.6.7-3" date="1742817600">- add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
- add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
- add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
- add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
- add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
- add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:21.0.7.6-0" date="1744891200">- update to jdk21.0.7-ga
- delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
- delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
- delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- modify huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-fix-build-fail-realpath.patch
- modify huawei-heap-dump-redact-support.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:21.0.7.6-2" date="1746014400">- update LoongArch64 port to 21.0.7
- fix changelog date error</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-3" date="1746878400">- delete huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.7.6-4" date="1747224000">- add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
- add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.7.6-5" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="3f030d2429eb8024b42daf5872c9f3428ecbd5e7dde75a0471e109c156b3b40f" name="java-21-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="21.0.7.6" rel="5.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.6.7-0" date="1737633600">- update to jdk21.0.6-ga
- delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
- delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
- delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
- delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
- delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
- delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
- delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
- modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
- modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:21.0.6.7-1" date="1739275200">- update LoongArch64 port to 21.0.6</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.6.7-2" date="1742644800">- add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- add huawei-Add-KAE-Provider.patch
- add huawei-Add-KAE-zip-feature.patch
- add huawei-Fix-arm32-build-failed-undefined-reference.patch
- add huawei-Add-Fast-Serialzer.patch
- add huawei-Add-Hashmap-frontCache-opt.patch
- add huawei-1-add-port-jbolt-feature.patch
- add huawei-heap-dump-redact-support.patch
- add huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.6.7-3" date="1742817600">- add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
- add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
- add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
- add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
- add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
- add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:21.0.7.6-0" date="1744891200">- update to jdk21.0.7-ga
- delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
- delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
- delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- modify huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-fix-build-fail-realpath.patch
- modify huawei-heap-dump-redact-support.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:21.0.7.6-2" date="1746014400">- update LoongArch64 port to 21.0.7
- fix changelog date error</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-3" date="1746878400">- delete huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.7.6-4" date="1747224000">- add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
- add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.7.6-5" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="46d0628ee8c2798c0ff732c8202f2bf51d7b3feac998f903f0863ecb7f3819e5" name="java-21-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="21.0.7.6" rel="5.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.6.7-0" date="1737633600">- update to jdk21.0.6-ga
- delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
- delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
- delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
- delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
- delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
- delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
- delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
- modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
- modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:21.0.6.7-1" date="1739275200">- update LoongArch64 port to 21.0.6</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.6.7-2" date="1742644800">- add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- add huawei-Add-KAE-Provider.patch
- add huawei-Add-KAE-zip-feature.patch
- add huawei-Fix-arm32-build-failed-undefined-reference.patch
- add huawei-Add-Fast-Serialzer.patch
- add huawei-Add-Hashmap-frontCache-opt.patch
- add huawei-1-add-port-jbolt-feature.patch
- add huawei-heap-dump-redact-support.patch
- add huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.6.7-3" date="1742817600">- add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
- add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
- add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
- add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
- add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
- add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:21.0.7.6-0" date="1744891200">- update to jdk21.0.7-ga
- delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
- delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
- delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- modify huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-fix-build-fail-realpath.patch
- modify huawei-heap-dump-redact-support.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:21.0.7.6-2" date="1746014400">- update LoongArch64 port to 21.0.7
- fix changelog date error</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-3" date="1746878400">- delete huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.7.6-4" date="1747224000">- add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
- add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.7.6-5" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="a0c5d7820f64db39658849b429a5c7862b041b3eebdf4e6cd4e043a9d272b0e5" name="java-21-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="21.0.7.6" rel="5.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.6.7-0" date="1737633600">- update to jdk21.0.6-ga
- delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
- delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
- delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
- delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
- delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
- delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
- delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
- modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
- modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:21.0.6.7-1" date="1739275200">- update LoongArch64 port to 21.0.6</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.6.7-2" date="1742644800">- add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- add huawei-Add-KAE-Provider.patch
- add huawei-Add-KAE-zip-feature.patch
- add huawei-Fix-arm32-build-failed-undefined-reference.patch
- add huawei-Add-Fast-Serialzer.patch
- add huawei-Add-Hashmap-frontCache-opt.patch
- add huawei-1-add-port-jbolt-feature.patch
- add huawei-heap-dump-redact-support.patch
- add huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.6.7-3" date="1742817600">- add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
- add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
- add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
- add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
- add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
- add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:21.0.7.6-0" date="1744891200">- update to jdk21.0.7-ga
- delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
- delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
- delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- modify huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-fix-build-fail-realpath.patch
- modify huawei-heap-dump-redact-support.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:21.0.7.6-2" date="1746014400">- update LoongArch64 port to 21.0.7
- fix changelog date error</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-3" date="1746878400">- delete huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.7.6-4" date="1747224000">- add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
- add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.7.6-5" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="049b096202a0047edfd0f1d9c19b10dd8f855016439eeb68f9e72fca2512c865" name="java-21-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="21.0.7.6" rel="5.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.6.7-0" date="1737633600">- update to jdk21.0.6-ga
- delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
- delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
- delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
- delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
- delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
- delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
- delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
- modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
- modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:21.0.6.7-1" date="1739275200">- update LoongArch64 port to 21.0.6</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.6.7-2" date="1742644800">- add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- add huawei-Add-KAE-Provider.patch
- add huawei-Add-KAE-zip-feature.patch
- add huawei-Fix-arm32-build-failed-undefined-reference.patch
- add huawei-Add-Fast-Serialzer.patch
- add huawei-Add-Hashmap-frontCache-opt.patch
- add huawei-1-add-port-jbolt-feature.patch
- add huawei-heap-dump-redact-support.patch
- add huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.6.7-3" date="1742817600">- add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
- add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
- add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
- add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
- add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
- add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:21.0.7.6-0" date="1744891200">- update to jdk21.0.7-ga
- delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
- delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
- delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- modify huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-fix-build-fail-realpath.patch
- modify huawei-heap-dump-redact-support.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:21.0.7.6-2" date="1746014400">- update LoongArch64 port to 21.0.7
- fix changelog date error</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-3" date="1746878400">- delete huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.7.6-4" date="1747224000">- add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
- add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.7.6-5" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="dd926568e5484803486345befdf91fa81f23713c50109a2c0d9cd19204f06860" name="java-21-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="21.0.7.6" rel="5.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.6.7-0" date="1737633600">- update to jdk21.0.6-ga
- delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
- delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
- delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
- delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
- delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
- delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
- delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
- modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
- modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:21.0.6.7-1" date="1739275200">- update LoongArch64 port to 21.0.6</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.6.7-2" date="1742644800">- add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- add huawei-Add-KAE-Provider.patch
- add huawei-Add-KAE-zip-feature.patch
- add huawei-Fix-arm32-build-failed-undefined-reference.patch
- add huawei-Add-Fast-Serialzer.patch
- add huawei-Add-Hashmap-frontCache-opt.patch
- add huawei-1-add-port-jbolt-feature.patch
- add huawei-heap-dump-redact-support.patch
- add huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.6.7-3" date="1742817600">- add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
- add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
- add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
- add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
- add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
- add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:21.0.7.6-0" date="1744891200">- update to jdk21.0.7-ga
- delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
- delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
- delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- modify huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-fix-build-fail-realpath.patch
- modify huawei-heap-dump-redact-support.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:21.0.7.6-2" date="1746014400">- update LoongArch64 port to 21.0.7
- fix changelog date error</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-3" date="1746878400">- delete huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.7.6-4" date="1747224000">- add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
- add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.7.6-5" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="af9620c43e76088d39a2682c734794b9dd51763763ce48b88cf639609b81bf88" name="java-21-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="21.0.7.6" rel="5.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.6.7-0" date="1737633600">- update to jdk21.0.6-ga
- delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
- delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
- delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
- delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
- delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
- delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
- delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
- modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
- modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:21.0.6.7-1" date="1739275200">- update LoongArch64 port to 21.0.6</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.6.7-2" date="1742644800">- add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- add huawei-Add-KAE-Provider.patch
- add huawei-Add-KAE-zip-feature.patch
- add huawei-Fix-arm32-build-failed-undefined-reference.patch
- add huawei-Add-Fast-Serialzer.patch
- add huawei-Add-Hashmap-frontCache-opt.patch
- add huawei-1-add-port-jbolt-feature.patch
- add huawei-heap-dump-redact-support.patch
- add huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.6.7-3" date="1742817600">- add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
- add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
- add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
- add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
- add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
- add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:21.0.7.6-0" date="1744891200">- update to jdk21.0.7-ga
- delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
- delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
- delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- modify huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-fix-build-fail-realpath.patch
- modify huawei-heap-dump-redact-support.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:21.0.7.6-2" date="1746014400">- update LoongArch64 port to 21.0.7
- fix changelog date error</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-3" date="1746878400">- delete huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.7.6-4" date="1747224000">- add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
- add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.7.6-5" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="3db1cc33bbc31886a265c3785817a4df7b28a72aa33741a5f9bc160083dbd51b" name="java-21-openjdk-src" arch="aarch64">
  <version epoch="1" ver="21.0.7.6" rel="5.oe2203sp4"/>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.6.7-0" date="1737633600">- update to jdk21.0.6-ga
- delete Backport-JDK-8207908-JMXStatusTest.java-fails-assert.patch
- delete Backport-JDK-8320682-[AArch64]-C1-compilation-fails-.patch
- delete Backport-JDK-8331391-Enhance-the-keytool-code-by-inv.patch
- delete Backport-JDK-8332866-Crash-in-ImageIO-JPEG-decoding-.patch
- delete Backport-of-8337067-Test-runtime-classFileParserBug-.patch
- delete Backport-of-JDK-8316895-SeenThread-print_action_que.patch
- delete Backport-of-JDK-8328723-IP-Address-error-when-client.patch
- modify Backport-JDK-8329174-update-CodeBuffer-layout-in-com.patch
- modify Backport-JDK-8340623-Remove-outdated-PROCESSOR_ARCHI.patch</changelog>
  <changelog author="Pan Xuefeng &lt;panxuefeng@loongson.cn&gt; - 1:21.0.6.7-1" date="1739275200">- update LoongArch64 port to 21.0.6</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.6.7-2" date="1742644800">- add huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- add huawei-Add-KAE-Provider.patch
- add huawei-Add-KAE-zip-feature.patch
- add huawei-Fix-arm32-build-failed-undefined-reference.patch
- add huawei-Add-Fast-Serialzer.patch
- add huawei-Add-Hashmap-frontCache-opt.patch
- add huawei-1-add-port-jbolt-feature.patch
- add huawei-heap-dump-redact-support.patch
- add huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.6.7-3" date="1742817600">- add RVA23 profile and disable auto-enable Vector on buggy kernels for riscv64
- add Backport-JDK-8315338-RISC-V-Change-flags-for-stable-.patch
- add Backport-JDK-8329083-RISC-V-Update-profiles-supporte.patch
- add Backport-JDK-8343555-RISC-V-make-some-verified-on-ha.patch
- add Backport-JDK-8348554-Enhance-Linux-kernel-version-ch.patch
- add Backport-JDK-8348384-RISC-V-Disable-auto-enable-Vect.patch</changelog>
  <changelog author="DXwangg &lt;wangjiawei80@huawei.com&gt; - 1:21.0.7.6-0" date="1744891200">- update to jdk21.0.7-ga
- delete Backport-JDK-8328553-Get-rid-of-JApplet-in-test-jdk-.patch
- delete Backport-JDK-8336012-Fix-usages-of-jtreg-reserved-pr.patch
- delete huawei-8347965-tz-Update-Timezone-Data-to-2025a.patch
- modify huawei-Adapt-to-clang-build-toolchain.patch
- add huawei-fix-build-fail-realpath.patch
- modify huawei-heap-dump-redact-support.patch</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-1" date="1745928000">- add 8352716-tz-Update-Timezone-Data-to-2025b.patch</changelog>
  <changelog author="songliyang &lt;songliyang@kylinos.cn&gt; - 1:21.0.7.6-2" date="1746014400">- update LoongArch64 port to 21.0.7
- fix changelog date error</changelog>
  <changelog author="wulongyao &lt;wulongyao1@huawei.com&gt; - 1:21.0.7.6-3" date="1746878400">- delete huawei-Add-KAE-SM2.patch</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:21.0.7.6-4" date="1747224000">- add Backport-JDK-8352673-RISC-V-Vector-can-t-be-turned-o.patch
- add Backport-JDK-8355878-RISC-V-jdk-incubator-vector-Dou.patch</changelog>
  <changelog author="Benshuai5D &lt;zhangyunbo7@huawei.com&gt; - 1:21.0.7.6-5" date="1747483200">- add heapdump-bug-fix.patch</changelog>
</package>
<package pkgid="da4f9b2ec398197ec85d236dec42123c030c96528195fcb833410bdeab65a1b4" name="java-latest-openjdk" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="6eb0e03cc9996c283546fc7fcdb34bece0d66ccd81088d9148387f6483f1d1b2" name="java-latest-openjdk-demo" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="10126673a20560c4944300727a9d2b9263e866c35bbc333147850a011790d028" name="java-latest-openjdk-demo-slowdebug" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="e02af6bd9961a3e825d13d628d146f349f0dd148fd767993c67e86e8d4b11e67" name="java-latest-openjdk-devel" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="eef82b65ecdee59c461dcdbfa5b1380d39f55232cd56cfeed83b477c2cc2dce0" name="java-latest-openjdk-devel-slowdebug" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="152b7025f43f3ed58b3dfa50e7934856a5b0fa1db176ae53c5e3abd729e18590" name="java-latest-openjdk-headless" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="1a665fc7041095badcd81c0b77e0a089d90f7724b60db076db027506f0d6a848" name="java-latest-openjdk-headless-slowdebug" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="35ef4c11268d11a89088c6c112d0f8f537e375e1563e01c83bb7567109b75c5c" name="java-latest-openjdk-javadoc" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="92947c40a51c4548bc882bc613ff40c41baf6ed1176056b1e641f2861d3b9e2c" name="java-latest-openjdk-javadoc-zip" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="0e1670bcc11aab21823d189ffd6eb7b03729bcd8b7577f1eadd2775b670c1e4a" name="java-latest-openjdk-jmods" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="40dd5c0258fecf7b3f12b88599b6c69a67065c6fa6f42d601ff26252c0118428" name="java-latest-openjdk-jmods-slowdebug" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="1935e2e08f3d58146791d0e38fab5c3ad9b8cf69d3c44a5276cf2e9fcf943b40" name="java-latest-openjdk-slowdebug" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="e410574f0bb5bb015be396cf18331f0bcdc9f53d89ddea59a144890f09217185" name="java-latest-openjdk-src" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="d20ac3df6cb3bbf7d798b8277fa7176974e81de38f821b278d5707ea96645cae" name="java-latest-openjdk-src-slowdebug" arch="aarch64">
  <version epoch="1" ver="23.0.1.11" rel="1.oe2203sp4"/>
  <changelog author="Autistic_boyya &lt;wangzhongyi7@huawei.com&gt; - 1:22.0.0.36-rolling" date="1717588800">- update to jdk22+36</changelog>
  <changelog author="aoqi &lt;aoqi@loongson.cn&gt; - 1:22.0.0.36-1" date="1718971200">- update to jdk22+36 for loongarch64</changelog>
  <changelog author="peng.zou &lt;peng.zou@shingroup.cn&gt; - 1:22.0.0.36-2" date="1719316800">- Add support for ppc64le</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:22.0.0.36-3" date="1720785600">- Remove Backport JDK-8316859 for riscv64
- Fix typo in changelog
- Add bootjdk for riscv64</changelog>
  <changelog author="kuenking111 &lt;wangkun49@huawei.com&gt; - 1:22.0.2.9-rolling" date="1722945600">- update to jdk22.0.2+9</changelog>
  <changelog author="neu-mobi &lt;liuyulong35@huawei.com&gt; - 1:23.0.1.11-0" date="1732017600">- update to jdk23.0.1+11
- remove some redundant patches &amp; fix changelog</changelog>
  <changelog author="Dingli Zhang &lt;dingli@iscas.ac.cn&gt; - 1:23.0.1.11-1" date="1732276800">- Modify bootjdk for riscv64
- Backport JDK-8332854</changelog>
</package>
<package pkgid="882096632634440b0d24c657f4decf7ff3a2bb8bc0389d27b82e89ad26f1491f" name="jbig2dec" arch="aarch64">
  <version epoch="0" ver="0.19" rel="5.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="15ad9a678616c5ec4cdb7419a08696ce89f28037e7e99d68c99e3243c7f7aa09" name="jbig2dec-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.19" rel="5.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="11f33af9ef73a5b31f09a6b835a092ffc69768e3f63ca3ad94798d29d5988b49" name="jbig2dec-debugsource" arch="aarch64">
  <version epoch="0" ver="0.19" rel="5.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="9d9344b445b17155a28c17efac7afcfb405dbad561d6083f0739e054b9205242" name="jbig2dec-devel" arch="aarch64">
  <version epoch="0" ver="0.19" rel="5.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="53c23231b0205cb983506cea1be4e739c56c51e9e05630de76eeb8d16ef83586" name="jbig2dec-help" arch="noarch">
  <version epoch="0" ver="0.19" rel="5.oe2203sp4"/>
  <changelog author="wuzx&lt;wuzx1226@qq.com&gt; - 0.19-4" date="1666872000">- Type:feature
- CVE:NA
- SUG:NA
- DESC:Add sw64 architecture</changelog>
  <changelog author="zhangpan &lt;zhangpan103@h-partners.com&gt; - 0.19-5" date="1724932800">- fix CVE-2023-46361</changelog>
</package>
<package pkgid="bcbdb814a24d5dc143d6407e2ea776965d005043323e252becb698bb987799d4" name="jenkins-json-lib" arch="noarch">
  <version epoch="0" ver="2.4" rel="23.oe2203sp4"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 2.4-23" date="1728302400">- fix: Handle unbalanced comment string for CVE-2024-47855</changelog>
</package>
<package pkgid="2f3142f03cf10fe29901b92bccb5afafb57595d7f7ce6c6b8f4c733a3cd00e72" name="jetty" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="416e722dee3a91d501be42d380fbc75147fe35c3b9dfbe95fcb337e2a7ae65a0" name="jetty" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="a8cd094acb7b14df3c812d7eba3c312355779e89c41866ed515f96394d278d8c" name="jetty-alpn-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="8bd83900ccda3fd89ab4cbc3c6de84f9eefb1484cb5bc52a9bf287e700ec45e4" name="jetty-alpn-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="eb0d072dcaad23f3b920dda7a5ea43b6bbbc0d41052bfc3230cb0a198c6c4b78" name="jetty-alpn-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="d6ac8a91f80b5539cc336c6af03dafce6cd83be39e20f0d374066963d7189155" name="jetty-alpn-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="89df64f34fdb2ee570f7878992ae6be51d22965a8407c78d140976ff71d97c18" name="jetty-annotations" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="244e98f6717ed3071af0f1b376e34917f16e9b220b3a76f9411249893256a9d2" name="jetty-annotations" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="e48c8fb3d175ca7386ccad71a0263592afa18e15aac6d7e9b4f9c1f82bb557fa" name="jetty-ant" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="92703e510f8a851ade5991e28be083ec90f1fc401a29f521cf49e4297e5d9fe6" name="jetty-ant" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="0d9b66d7e8bcbe2f36d51ef48a089add07da65cdf27280d1d6356598b6aeeeef" name="jetty-cdi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="63531cd57a52f80c8880326788a7d07365c5204a71cfef30953b3c49812fa04b" name="jetty-cdi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="5672bc931206444000105542cd107efbee01d367630c6e9ef8def694a0901da6" name="jetty-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="1c6a26415b7046132a61d807e7b4917bbd8e73211795f3c8e8ffecb1b59a9eca" name="jetty-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="91426503170fc1b1da3b0bb1868f09ec133c1c173c5aedb74e93e9ab2d58d12c" name="jetty-continuation" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="abbcb8979cc9a9832dcc1be814ce4248073bc9ae24de6c22945ce61e9f2f3da0" name="jetty-continuation" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="a65f493414d2ec2df79de6c35a97ca4d272385ea5daaf11fc5b6d59915a6aa5c" name="jetty-deploy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="266bc460f801b286360f91918d1a01fe01c66d1cf86ce1a5dabd3772e2022bc8" name="jetty-deploy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="d4475844b6d37912c3967e148a0c8b5f84e2f77e3f2c895811924d889cf1928a" name="jetty-fcgi-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="3805ce40810457700add8dba3df8ef558c613456937997b3cc3455207a242e0c" name="jetty-fcgi-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="70ff7a27ae5d01d1d9247edcb6aabfc6b943f76acd0da676909f72a0187accfa" name="jetty-fcgi-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="2e0b901003960aac288a1cf4bf4d4d6d4865cd616323b9c14a4331f464c10eb8" name="jetty-fcgi-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="518519e69713ff38a89f5a487c24e6b11c06647f600400557051764607d10c41" name="jetty-http" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="84b4f83ef8c845af3d63c831d017377f99131f86028b24c150b337d1f9c6b0e4" name="jetty-http" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="596c1487848e2e57904bfb260cafe64244a770b9bcdd2456de4bf933f609348c" name="jetty-http-spi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="10c7313694939ea900d0e48b9ee2fcce09cd21acf1077994902bdbd374aa8b48" name="jetty-http-spi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="90ff93eadeda0021b14328bd36a680428683f5c870de8ae9cbee332b81a31bc4" name="jetty-http2-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="086a2d2bc6247f58a3c89a8dc8db6af8b27c605081027a9ccff95c74a0419b5a" name="jetty-http2-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="c81fae76a0fe8216e2f95e6a5925cbbce5488af2b353a6ebebdae6be3636231f" name="jetty-http2-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="9e052dbea324bda576d866458d1060c0a5fb477a0cc6350f41672e3eb254cc4e" name="jetty-http2-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="c25a22c7fef0189ce335f11220de150f1f6c3bd6b79057c6d4c96f15d4da8912" name="jetty-http2-hpack" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="2185d365625a2dda4a68c1d2d60b19be119846aa42812d1d44dc259f63703085" name="jetty-http2-hpack" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="fb9e63bbe8b0cce0ea57973f68aa337040e66c87356ac33fdba02a86f064383b" name="jetty-http2-http-client-transport" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="9df13d4ac89f3a3bccd2e7f154e60c5e840cca6eb181903fa156f2d2608b61f1" name="jetty-http2-http-client-transport" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="b04132aee9d272a90d5771ff7ffc33a362a93d37d457c056b5494cb118690478" name="jetty-http2-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="6cb652faa34327c2fc4bdf2b812db53041d496e429e1156d3ae141f8863ffc13" name="jetty-http2-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="b33c0a057bcb3a222459df162d0b4870bceb691224198aedc13d655d91306496" name="jetty-httpservice" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="f90191aee069236f597877961d67a11729398544a6208b21ff00ed576d37f55e" name="jetty-httpservice" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="119a8dd2624b1be7383cf6a348604ef9c24d27103445f998473ecac182722c8a" name="jetty-infinispan" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="e93389f47e0dbedf077a3a0d33d7b2b1955125855030202f11737ab052bdf220" name="jetty-infinispan" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="a98b25c24ccea7b22288222aadc98a67d2f7493c788884f32c59eddec8a85316" name="jetty-io" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="66b285df83040829686f2c9b9bd87c549038165dc0315c1586bbf518d9d6b402" name="jetty-io" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="5630beb1b2777d03586787c7119620fd511d96dc6fe2463fa407ce6485e059e2" name="jetty-jaas" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="34427f21555675b3bfe343bdbbb7c16cd7bd49e45e0dd6a0a14c51e272137287" name="jetty-jaas" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="a2f671db568f76151acb8ffa4fb012c038fd1c1158462b43df0ef97c4316ae04" name="jetty-jaspi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="1cdc87cde1ec300a55757fa9749cb3d731f27aea5ff8d640e56278085bea4beb" name="jetty-jaspi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="2b9685dcc74bbfbd2c8f78f3ab212329dd18463801f0e22e205d30c015e7ea12" name="jetty-javadoc" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="b5539604aa148be535bc6970f0fce65393a08fc030008a266634064025f930f1" name="jetty-javadoc" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="d1eec80bc4391bdb793ccdddfc7799196df5cd77423974561eb9abf2a4a3e094" name="jetty-javax-websocket-client-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="ab0048387775147033247fbf07859cf35e73ca665623f7be664993b7103c5979" name="jetty-javax-websocket-client-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="676c80f94f26e4e59cdfa5ce61682cfc66bd1851321cd1ede79af8d532cad7ab" name="jetty-javax-websocket-server-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="cbfbba9b26d663d482af92a5dd75db9f37c5aca6d9733bfcbebb6a5180a10272" name="jetty-javax-websocket-server-impl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="4d85e21f37e16b3f7ca6765ca0e515fb04f28c7e768892a2bfdd2abc069cff13" name="jetty-jmx" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="c5d25a2e7d88a35e2d16a5028058224c4ecdf181dc6a12ef2e10de9f561bd00e" name="jetty-jmx" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="0a3df6818d5750b3a33dfa9f4208ca85935c670327386f2bbbe4478ac578273e" name="jetty-jndi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="3048edb04928332e76abae77c3340514b42981cf348a9b727ee27dbc66f5ae19" name="jetty-jndi" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="7af3125f61510280107026a836923f283be7d3d8ff558c33fa6bc70d708129fe" name="jetty-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="5a1979a098ea6a73eee697c6584ffa93754bcc0c33838024a202f80292570e7a" name="jetty-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="30233842d44e9d516ceb60f5879a764dd1f0782bb9c8589872c439c67f5d8276" name="jetty-jspc-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="7ea4dd9a1cef7ae4dab746866735208e1fcb015f88ad995d6505cbbb22c3a560" name="jetty-jspc-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="cc4949ee03c793660383a9106dec2a66b99e0320522caf15b504d820c9ee094b" name="jetty-jstl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="a2a5dc6cee24ff3aa4f59619e430b507c795d6ca3160de021c9891939f09fc8f" name="jetty-jstl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="a60120b4be1c40ea52f05fc922a3786a4a780b2543af26c5f9de834c3015177f" name="jetty-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="1161b5f95690d1a2c5b3f2c8be33a78cfab9498516c377da89083a66bf280d88" name="jetty-maven-plugin" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="f043b16e1019f8b1f25f6d2a5906e8c411c71b23f80a903fbd5ebca3938a8377" name="jetty-nosql" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="a398cf3bbb59443e6f9f777542c25ab4a22452ff95d6685ee63f72f5cc6fee80" name="jetty-nosql" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="d8ec3663ec6e0f0fc6a73a69bc21e5271b6e9d184e3f69dbc6ef841b527bd3c2" name="jetty-osgi-alpn" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="607900561c05b3a1c3ca2ce27b75529c0a20dc642954965db2b71d3b197fda55" name="jetty-osgi-alpn" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="eb12389b01cfaca5ef4b7f8ffee1626957bac000748fa2b5aff2a502410c44d1" name="jetty-osgi-boot" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="5ab1f81d7e882b55d9cabce23fa30f3128006ded8b1ef28059afaefc580904f5" name="jetty-osgi-boot" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="978e4912f8c2a3a34da0e6340953aa1d4b2f657caee187baaa92b3848ffa0e71" name="jetty-osgi-boot-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="f3ff07498b6e32cd74ea51b5be44c0fc118685fa9a9cc2823929f2b7d7d1821e" name="jetty-osgi-boot-jsp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="5c2a936f226976875487eae2c4bae0d165e850151ac8f47b1d8ca140557ee460" name="jetty-osgi-boot-warurl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="1222abc05b25d2e14cd57a77dd54e285209e2fbb9ec8ea48614be7604a0d2f83" name="jetty-osgi-boot-warurl" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="6364679f3a4ed05b0f1336657d74585e19d036e10e92f6c74df8f6b095510a21" name="jetty-plus" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="10eec44eb7a645c0d143b7383113e50f6c7394be53814614b97d4c6fce73a9d0" name="jetty-plus" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="925a1ad9fc958f63403f3cc549a743e77146b6242a110776c985fab9a2dc1025" name="jetty-project" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="dd99a5e6bd2d66aa8f1106310bc1542247bfe3be7db392fbf679ac66c24fa35f" name="jetty-project" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="fdc4ab357e4f97b819256bf6714fbceffe9c9a235e4493cb2862f1a8c2b93f21" name="jetty-proxy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="671a57b535db8e7048c9fb059589cac71758430a11c435367b9a1ada4844c2a7" name="jetty-proxy" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="94c86b3fa27a656c7a796efff1609649dfe9cb974e202829ee7e8414ae444834" name="jetty-quickstart" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="02340f33048f8e217be5309002fbc406c0a21cab4d7e3e62279a1a974e685414" name="jetty-quickstart" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="1bdf1874fbae9bdf684748448b82b889a1a0c362c303f4c4793c949e370aa499" name="jetty-rewrite" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="216df55636612037c15d0385aab11238082c1ff04913ea20298e180da1742b10" name="jetty-rewrite" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="05582a1cf91a5a3be9c29b6daa34046138211b770ec1c5f0decee2773aa0b1af" name="jetty-security" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="1b74e7232e7510533f066164f0b50a56f2b43e342f7448d5bced7ad736d2f781" name="jetty-security" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="d67dd8df12f840a88529f67962460561fc08c3310c4eae06394ec68d887683e3" name="jetty-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="d776f31adc5b314558584bf73fac2154da501e03457ae01633d0fa1df041e335" name="jetty-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="8a4fb45506ac065fe87cb4d883f72b9270a860b6d7a326cf35346ea3a60c4c5b" name="jetty-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="eba7cf724a3a428c075dd571df89573651efbcb285e44da207fd028790397d9b" name="jetty-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="c9e77a5d86755f1a740781434d4fe22ecada16b6cec759c2705a03bdea700782" name="jetty-servlets" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="d1ded49e6ab57b6bac98d0f484779c12caee6c709bfba49bacf945e2b260cea1" name="jetty-servlets" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="a16793b7b482814cec8381f6f8a4b6f46725c108cac8371bf5e71baa885a41b6" name="jetty-spring" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="55ae17c9ecac6217647f1fc5a661de4e02fbf2de596c2801b7b98c774b2212c1" name="jetty-spring" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="8833d46face044c6667f03973ae976c4438bcd5cc91584472a1683a04f5b0779" name="jetty-start" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="e3c7d6cdc82e83b84a06416111b82d8b7d8583a78062d3bab893539138d63487" name="jetty-start" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="dba0adb08ac70333b76e6952d0b4036057f33a560d9d463221007b0eda8cb266" name="jetty-unixsocket" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="f7f8e5e73b4241ddf4197fc45820b53cf66b4b275348bd395dbde5ddcb52f955" name="jetty-unixsocket" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="a6bb82fde14ab44354defb66b58d562d7b03aa9fa775f5e30ffb438fdb9a8f19" name="jetty-util" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="334b0cb4c8f72a25545d530ec6b2a3b62a61c218998ae3161d8c46f70d933f88" name="jetty-util" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="900fb6d1c05da108e661aacaecd3aa25d4f2c42a3d12220437999e4f58724beb" name="jetty-util-ajax" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="02ef3142cb1387ecd7125a064babd5c463be089bb179fa6f089c7abe2837002c" name="jetty-util-ajax" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="8e68338f7f2f8bdbc51c89f4818b942275bd9220aad8eb0689dfce9828bafe8a" name="jetty-webapp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="caae3aab23e48e89fce8d195169c10b68ef686e658c65897863dcd7687db4107" name="jetty-webapp" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="9a8bbf1975c7458cf9fb91d90f7cf4724e90974d199b891ff22cbe85724c6d32" name="jetty-websocket-api" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="dfa717685a6e5ee9fffe78714c8d0fd635cb85a34425fe381873d0fb27e7b471" name="jetty-websocket-api" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="17de1a54790c6de05a6703977ced87a4c8ff20396a6ed1283dd669b51b48f791" name="jetty-websocket-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="0d9e61705dc37c3e93da891a5c238e09d00bd68d99a6f3c7b3b3c3cced436c9a" name="jetty-websocket-client" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="904ab24683319ca9a601e1a71dbdbb14ad3455cdd222ad361b547de1e9ace12a" name="jetty-websocket-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="b0443b27a4be29e8f0078cb4ee803f9f80470f12677db6dbb9e62873c5368d8e" name="jetty-websocket-common" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="4847a1967907cdb6b7bd2dbd87b34310927cd9f8798805e5dcffdace7d15b224" name="jetty-websocket-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="c9d2f269f98f9002dcf4dcf5e6227187a8b41227b057f06dad478b04a47ce695" name="jetty-websocket-server" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="f75518235b224541069acb1929ec638541deec6fe47f768a1ad7815018e0a53e" name="jetty-websocket-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="e875cb0fca74fa2f810e577d0270bb599bbe31f9a3d97161eecb4f3a22437150" name="jetty-websocket-servlet" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="15732de17e34ad6d79a432d93e5a86428441b57ee02f549e4de363a23fb73868" name="jetty-xml" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="7.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
</package>
<package pkgid="e0257e5d318ec6ae1951e658c058973b8771b8cc7c5acc36adb2814431ce20fb" name="jetty-xml" arch="noarch">
  <version epoch="0" ver="9.4.16" rel="8.oe2203sp4"/>
  <changelog author="jiangpeng &lt;jiangpeng01@ncti-gba.cn&gt; - 9.4.16-2" date="1672228800">- Fix CVE-2022-2047 and CVE-2022-2048</changelog>
  <changelog author="Ge Wang &lt;wangge20@h-partners.com&gt; - 9.4.16-3" date="1677672000">- Fix EBS build failure due to jetty-util version mismatch</changelog>
  <changelog author="caodongxia &lt;caodongxia@h-partners.com&gt; - 9.4.16-4" date="1678795200">- Fix self-compilation failure</changelog>
  <changelog author="xu_ping &lt;707078654@qq.com&gt; - 9.4.16-5" date="1706529600">- Fix build failure due to upgrade jetty-artifact-remote-resources</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-6" date="1721304000">- License compliance rectification</changelog>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 9.4.16-7" date="1728993600">- Fix CVE-2023-26048,CVE-2023-26049,CVE-2023-36479,CVE-2023-40167</changelog>
  <changelog author="yaoxin &lt;yao_xin001@hoperun.com&gt; - 9.4.16-8" date="1730808000">- Fix CVE-2024-6762</changelog>
</package>
<package pkgid="b2fd284a3aa4db413c411fc45b98e8f248004c08ad28643e7a30ff24671d6696" name="jq" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="2.oe2203sp4"/>
  <changelog author="yinsist &lt;jianhui.oerv@isrc.iscas.ac.cn&gt; - 1.6-4" date="1714305600">- Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-1" date="1750161600">- Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-2" date="1750852800">- Fix CVE-2025-49014</changelog>
</package>
<package pkgid="1d0bc81d79830af36d27d3afe052ffdb242a935e522a9fc450e7e4767358d85c" name="jq-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="2.oe2203sp4"/>
  <changelog author="yinsist &lt;jianhui.oerv@isrc.iscas.ac.cn&gt; - 1.6-4" date="1714305600">- Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-1" date="1750161600">- Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-2" date="1750852800">- Fix CVE-2025-49014</changelog>
</package>
<package pkgid="f393a5ebd716f1278de5e81f6dac0e6a0a9bc138f1c4c92ac4b82b94bfdc6bfc" name="jq-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="2.oe2203sp4"/>
  <changelog author="yinsist &lt;jianhui.oerv@isrc.iscas.ac.cn&gt; - 1.6-4" date="1714305600">- Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-1" date="1750161600">- Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-2" date="1750852800">- Fix CVE-2025-49014</changelog>
</package>
<package pkgid="204fdb8e5f301fb2c0470bd9af838854dbd7bd5fcfa6612fdda2ceda772f0932" name="jq-devel" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="2.oe2203sp4"/>
  <changelog author="yinsist &lt;jianhui.oerv@isrc.iscas.ac.cn&gt; - 1.6-4" date="1714305600">- Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-1" date="1750161600">- Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-2" date="1750852800">- Fix CVE-2025-49014</changelog>
</package>
<package pkgid="9ef47e86895c65dbb7060d4221a3686fd3b736be920ac8876671fd486667d9bf" name="jq-help" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="2.oe2203sp4"/>
  <changelog author="yinsist &lt;jianhui.oerv@isrc.iscas.ac.cn&gt; - 1.6-4" date="1714305600">- Valgrind does not support certain architectures like RISC-V, Before depending on Valgrind, first check if Valgrind supports the architecture</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-1" date="1750161600">- Update to 1.8.0 for fix CVE-2024-23337 and CVE-2025-48060</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 1.8.0-2" date="1750852800">- Fix CVE-2025-49014</changelog>
</package>
<package pkgid="9bb047d9a7542fabd1191c4cca82e707be649cddd423e2ff0feec9a796990815" name="json-c" arch="aarch64">
  <version epoch="0" ver="0.16" rel="5.oe2203sp4"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-5" date="1742040000">- Handle yet another out of memory condition
- Fix issue 854 Set error json_tokener_error_memory in
- Issue 857 fix a few places where json_tokener should
- Handle NULL gracefully in json_tokener_free
- Issue 881 don t allow json_tokener_new_ex with a dep</changelog>
</package>
<package pkgid="1f240813d88fbdc67b0b8fb6ba234993a3b128ded71ceb341c9f6ca8438a01c8" name="json-c-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.16" rel="5.oe2203sp4"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-5" date="1742040000">- Handle yet another out of memory condition
- Fix issue 854 Set error json_tokener_error_memory in
- Issue 857 fix a few places where json_tokener should
- Handle NULL gracefully in json_tokener_free
- Issue 881 don t allow json_tokener_new_ex with a dep</changelog>
</package>
<package pkgid="dd0d2d2ce48236b92c923622cccfc8ad5c496b76b0d687fe7071451e83b5bb7c" name="json-c-debugsource" arch="aarch64">
  <version epoch="0" ver="0.16" rel="5.oe2203sp4"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-5" date="1742040000">- Handle yet another out of memory condition
- Fix issue 854 Set error json_tokener_error_memory in
- Issue 857 fix a few places where json_tokener should
- Handle NULL gracefully in json_tokener_free
- Issue 881 don t allow json_tokener_new_ex with a dep</changelog>
</package>
<package pkgid="efbcff173ec3e44202a82710fea830f5f42b01a2799f1b4c2a038bd884dba982" name="json-c-devel" arch="aarch64">
  <version epoch="0" ver="0.16" rel="5.oe2203sp4"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-5" date="1742040000">- Handle yet another out of memory condition
- Fix issue 854 Set error json_tokener_error_memory in
- Issue 857 fix a few places where json_tokener should
- Handle NULL gracefully in json_tokener_free
- Issue 881 don t allow json_tokener_new_ex with a dep</changelog>
</package>
<package pkgid="52ab7c4caa4507666a4d632b0cd1d13fb1bf4d6a7d1dd2ca142024880b143c5f" name="json-c-help" arch="noarch">
  <version epoch="0" ver="0.16" rel="5.oe2203sp4"/>
  <changelog author="zhangrui &lt;zhangrui182@huawei.com&gt; - 0.16-3" date="1682078400">- backport patch to fix integer overflow</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-4" date="1693828800">- backport patch to Fix build with clang-15+
- backport patch to Fix json_tokener_parse_ex: handle out of memory errors</changelog>
  <changelog author="sunhai &lt;sunhai10@huawei.com&gt; - 0.16-5" date="1742040000">- Handle yet another out of memory condition
- Fix issue 854 Set error json_tokener_error_memory in
- Issue 857 fix a few places where json_tokener should
- Handle NULL gracefully in json_tokener_free
- Issue 881 don t allow json_tokener_new_ex with a dep</changelog>
</package>
<package pkgid="bcc18c8dde812f216f0dc77a2a6787249b988a7b08406b54040feece891c378c" name="json-lib" arch="noarch">
  <version epoch="0" ver="2.4" rel="23.oe2203sp4"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 2.4-23" date="1728302400">- fix: Handle unbalanced comment string for CVE-2024-47855</changelog>
</package>
<package pkgid="741b362f1866d741b1d0eb8a84432ee8c6acaf257ff3c67ead92491a0d44d3e6" name="json-lib-help" arch="noarch">
  <version epoch="0" ver="2.4" rel="23.oe2203sp4"/>
  <changelog author="Deyuan Fan &lt;fandeyuan@kylinos.cn&gt; - 2.4-23" date="1728302400">- fix: Handle unbalanced comment string for CVE-2024-47855</changelog>
</package>
<package pkgid="815a1bafa7e56c0cf7118b82261b4672f5876923875d830371424a0b57a14515" name="json-smart" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="1.oe2203sp4"/>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2.2-2" date="1680609600">- fix CVE-2023-1370</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.4.8-1" date="1707048000">- update to version 2.4.8</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.5.2-1" date="1739793600">- Update to 2.5.2 for fix CVE-2024-57699</changelog>
</package>
<package pkgid="dc66b6ca8d624db6e3d99db1736d18dfea03eedbc72873d1e7d09f3f5f4ed2f3" name="json-smart-javadoc" arch="noarch">
  <version epoch="0" ver="2.5.2" rel="1.oe2203sp4"/>
  <changelog author="liyuxiang &lt;liyuxiang@ncti-gba.cn&gt; - 2.2-2" date="1680609600">- fix CVE-2023-1370</changelog>
  <changelog author="Ge Wang &lt;wang__ge@126.com&gt; - 2.4.8-1" date="1707048000">- update to version 2.4.8</changelog>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 2.5.2-1" date="1739793600">- Update to 2.5.2 for fix CVE-2024-57699</changelog>
</package>
<package pkgid="9579d4c957ae7189860178d36144d21295177459c727fcf06df52fdf1db91426" name="jss" arch="aarch64">
  <version epoch="0" ver="5.1.0" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 5.1.0-3" date="1739793600">- Fix CVE-2022-4132</changelog>
</package>
<package pkgid="4540835584ee0fdcc5715919de188adc9df9c1a59c48a2084a05fe8be8ed8fbf" name="jss-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.1.0" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 5.1.0-3" date="1739793600">- Fix CVE-2022-4132</changelog>
</package>
<package pkgid="1ded3bf1b2649bb72768920537d2750c673a65d45461010156ebd9724c837733" name="jss-debugsource" arch="aarch64">
  <version epoch="0" ver="5.1.0" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 5.1.0-3" date="1739793600">- Fix CVE-2022-4132</changelog>
</package>
<package pkgid="1eeb3e57ad2c602a89493d6c840af46994b34df68330ee7073abb55dab89ebd8" name="jss-help" arch="aarch64">
  <version epoch="0" ver="5.1.0" rel="3.oe2203sp4"/>
  <changelog author="yaoxin &lt;1024769339@qq.com&gt; - 5.1.0-3" date="1739793600">- Fix CVE-2022-4132</changelog>
</package>
<package pkgid="8c6110127ec3a6f55e4a3d2626f686c10f6646c4506d2a86762b8e578be4d874" name="jython" arch="noarch">
  <version epoch="0" ver="2.7.1" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-3" date="1751889600">- Fix CVE-2025-6069</changelog>
</package>
<package pkgid="0d78266192de594dfd79d0a30f130fb602db4209e6dd0c378450d86385102881" name="jython-demo" arch="noarch">
  <version epoch="0" ver="2.7.1" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-3" date="1751889600">- Fix CVE-2025-6069</changelog>
</package>
<package pkgid="5597f18872391fb93f3506a52c9939961d3dae1b0212e294c1125b22282b934c" name="jython-javadoc" arch="noarch">
  <version epoch="0" ver="2.7.1" rel="3.oe2203sp4"/>
  <changelog author="wangkai &lt;13474090681@163.com&gt; - 2.7.1-3" date="1751889600">- Fix CVE-2025-6069</changelog>
</package>
<package pkgid="ecc61e16e3b0835ede51c2335485f46445f8a11c45709ee960b4580d22cad652" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="69cb1b137559bddb0933ab6b45e9a67bacc4a0587854c01d0f5dd9e7577fab6e" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="8c4c5167aca0c3ffba94fa1a8d50317a470b0855437b834e60045552306a9517" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="04a6e8fa0c5dff93e942c72d38678fad4e299c747eb7a7f6da9dd5b87c7522e1" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="5e07f5a7eb3cfa66e31834508ce8c604d556463daff645593189afdf33e8283e" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="a943ec80cae3dd36fae3eea3bc527e07514635057df03b70c2195cdfdbdfb9ed" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="f8fdd147363dc3d8b5f4ac8eff010b9766f66ac1b1cc85f8096fc3e5d3271ab3" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="66c7fc6c7ca7d2d711e81c78825dada2e653e7d13e5e1d637a546e1c3a4c2d39" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="c1b4d3cbb27c4f9200fefa2a0a2482ae29dd75b1cd7334ab66e6ae72b3e3a04e" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="65c7e083120d6e241bef8e7cdd82439fb28cb40c8933544e24fee35ff16e3533" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="f653f0640628902f605c3d4abf20457542a88e19bd2bf2c640ca423848833573" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="031199386cc8d28232959736778d65a6ecbf45919524fbdf9eb0e431e59a0fe9" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="9c520b026d0e43bdc3a71447f9a7656fbd53df35ff09c4fae0ab14a6f1761fac" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="3e28b094f9d909bb06b7a778da8ef6affc877a14bc75c4cb243570a19abbf174" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="4a3eb868e4f2542e1afa790a97ef338eb5c16cdca864ab2d1bbe1e36d16fd13f" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="8abacb47227847eefc521ea0377144ec51254ab61c2fdfba2a04ec1b5316659c" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="60160efad1fc898ffcf38c9b30335f2b5b4214c4190e6168c9fa5af34937b24e" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="dc233a5133aac77ba5c7cc321db11db16afb0954057846e195f887d4060876ce" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="adc027c383ebb3eaac0d205ff18d8a7390783a0c4f2862315e5d750c8e5a51bb" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="151f60d17ee94be11320c310ecc1297a1db579365d9b8fce7a74715ec00abd76" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="af6a4cd99aa3e23c50552f6539f31092adc48ccc034d8e4b10d9a6db8a4f2044" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="6cc5614ca3e757b5b8d2ba778d60a1a0dbcb62548e8f76c9f446627f0ebe8a90" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="b032cc243fad08af9d26d3974dc95dd6d2a9665fa49222b26bfd23e9dac2e6c8" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="d46e475e1e3fc79585c549d1db244c5f08c0fa4e2ba7b0911b712761e3f5ff77" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="9a674994f78f4b0fa7a083c735a390f8f34d5e3aa3d143aae0ead363119c2211" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="26291ab6578f32b720ea3e650da19e1c35c3de8e35fcdaa6afa5907a0c838fd6" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="85d3425258344aa970ee178fc893a16f5d789e7f880e2847930ae24d5233f397" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="6c4a49e2082f60b091e108ea097eb78bb85a86cb934c4b79fa1619dfac52163d" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="84c40f68ddc0c5e22991132d373a74d049dddeeaa3d2208f898db5513cb81997" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="6edb7cd1b804b6f5eb7e8baa08cf6de48ce15d6bf43d72bc1cc319abf36ed66a" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="444078d0018c5ed9aaa4b38051ec2f1c0565815a99053127217e49d8bfa99b78" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="3076e3ba06ea38822357269940e20a2def68d8d8d876af1c095501b4ac96f49e" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="da3996805087630661ff551726ab28f109646c87568fbfed64a28240dbea98a3" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="fa0ae227f7c3e4adec977a652afc4f8b5071fbe3bd3403783b3e9fbc3abe9d6b" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="701dfbf2d38f6b82d8e3e140cf4ae2bb4edead1e6f851095a3d9d50e5a24c53b" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="d5bb63c7d7613ca6f5d9a74290cb2e72cfb027cfed3ddd904761e220e72b5538" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="f4d13765f1fc8212e0d687da00ab8e838f13490555094a75595206ab869b123b" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="cf0a6f918ad0c3ae32829ae2124180d574ded3bc80293f5b679f873083982100" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="4a12304f2a5ab4f4b13a69487c6f995de2c96b23b2dbd24e6da60632a528048d" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="ee77a21dc91a2c30f0d5016fc94feaef166e065cc9c9e666e9d55131b205cb40" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="d13c2d2d68843a6a4aedb31660dce96463709f4a42e2add34f38b07ce18a3fe2" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="bbf432cb177221d548b599746c7f2cddd56469e401a83b3471c3fa2fa7439d6f" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="0879c2db4ccc867dfbadefdc92adcb3016e042c0840ac34e9ac020082f91975b" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="1a771d0ff0e279aa8afc5ed004db597f08df7c9e41feeba9a6b4ef6305be6bba" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="8ae1b6faded699e539b7c2f5174316d45f7cf7e29ed89ecd3a1306f82bb08847" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="9cb138d6bd905662791140202c33b81b99d2238b31c4110187e7435e2d74fcd4" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="5b2f118ab133255a332314fbef7364ff9ad791eb627074133410d0d325cc6749" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="168531eae7bfcd7f84c0988ff9267df6cc8566e4e82064ac08db69e352644d05" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="8ea5bdd3c0ea42a9f8828e0f50563a5d9136b54e39927a60b901cade48bc7fbc" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="f1e560145be8fedd99cd326f1d85ccc06d833576a79208bd138f5e2db728dd44" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="b03ba4ded17d5ade2995bbd95b75b2852645c596bcad829a5396a8b23e8b6f66" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="859795ff6fbced465f8e4e550c21b55fb461d783a0e0168e40d1194f6f549d77" name="kernel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="99b5ff218c33f52e7b2dbd07a558efe874cef8639a82ad372906f1f57990fa38" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="aaeb288ee86bd6e5e4efec03124df6b344f69dd7101b103e7e4de2a46be728c3" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="942cf3f69fd4eaf19e5ec9b7f700c5d99ae7006b0d4dd536f65ac08396217171" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="68d4aa1e8ed92a07eacaa30367c4534bb24e19eff94b8a2b6bf72b50ecdb4451" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="97a1f07f08fa7070b70992c72e78e325787e042de061d5a31baab7c4a77622f6" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="393b8b076b4d5642425fe4ee524dc7638f2f0c806b71a47eea2282f93e73b91f" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="ac3372ddb4d5256a3b5a37001cb0660ef78d1f4b2b3952f6b0346447cc5adbf6" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="8a2a8fb0c146a1f7780cf7938ac3b0ace872718e9987bf54f2a03cfdf2d5ee6f" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="45fb4e5b53dc2368c496286b0e923447ff3f9148f2862fa4efcd3858c3f507b1" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="012a47764f354d13312d87a5b7b77bf5ef2ab66078734150e774a0ca1c4b1f91" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="cd9c64d5597cc2311e9eaa58a04a9014624fa82080dad7c0232be998017f313a" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="be7ca15e9539f9c705d930af6e320d42300b2bc61840dbb56e6ebd48b5145fbc" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="e1727a24a89a5e2bbdfb26ec2bc79f2c7c10f93463b4b3c3cc153a3920ef4ba1" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="5bd62f01a21ca2908bf79009310909f13d335b4549fd4ab6bba154f9321346f9" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="7cc34d9bbc111a056a7df07cc47763a074469570b37b62266ea12377cd4b0d2f" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="f98a185ddb441571ae050c9c73c8110c9e7a4dbe04cd2074cba30bf0a2e37387" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="5657b3d9952a82c73dcae921a789011b9ac9a694e7134390fdda64d1d0676c1e" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="a7f93754f54bb621f6f922f003a22e4b2f4ca06ebe4a10da440fb0111665b057" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="3bc0aa4b41c6d0bd8c80b7fc6faeefaa69611291dc3087756e4cba96f4228a3b" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="b56cc69478e741f23d29e464e738bb5bd21441f2eba576d01369315099c5205a" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="97fc1ec6db447b9ddac1db56129d269fd8d2533af855e26d01bcb354a8224892" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="3e4471cc94f5e7c26c514ac715a800ec59344ae2fc0b3830acd8a1771820c432" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="580376a38d8c7bd45163c25396844b9fd57852186d32be141f5fff7c3bed9a23" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="3d9acb378821dbfa53326ba231d408667a7ba0c41770e5c2724ee5ee903477c0" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="462f742b7673c0166d0dd71d240dd0eabc6bdaec9ec43a1e877b0587f1a0fc13" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="1107b4e3f60262fc3710409da9da3053c61e05ca4d4b36779f4a0e090b07bd5c" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="d647e358cfe0bec86f19796f8e5649a8f39d99519ea74d6711daa09f4cfdf1e3" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="a92801da508b4bdbe458e070f285163ec00cee8e800c702c423bf91c14d6d1bd" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="86344ea1f90c59c618504d7f8fb1932982e01de0fec7d81a12a8b3e28ae2ef0f" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="7860c294762313cb4798b2440b60bd91ee76e373f22727c7669be4d31c7ac077" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="042f3f0ccce8cea5c961a83771f63bbffb9e1ae12ad07e159ce33f4504ebb113" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="22c5d3d294b3187abdc7407faae5184165a5389830ecb73435f6187acff20996" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="512fbc358b5ab501f2dd72e5cae55f0ac411a31ce299e3f10d1a184b467d73c4" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="375242a22e294470907ebe44797f94724e406064e46e71c3e490b4adffc3bd38" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="07481706ce76701a45a0835b716813617c13b2891f89e2141c561c786a231e48" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="ecfac7dc5480d3d799d16892ac8087d3119248bae5c77384332d073295df735d" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="af7aabe5c2893c4c940a8f3c47f5f5c7df5ed395c15c300056b2c5c11626ef3f" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="838ce9c58460a0c86635c2fb3dc9d3bacd532dc960ef48d16b38d1ff47e9ea74" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="e0cf860a041be9d6e178de09a54d44c411610b18629ab313db56ef549ab9884d" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="7a0a1d879d3444480a1a8ddeaaf0d292854c4e5ebb1c17c7c5bc68de478173c0" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="f7d521c1844b83d3330c31564fedd7520950321dc6a94da20d3b0abb558c9015" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="3dd28a1cd1deb32b769e883a6b4edb05b20a23652832335f7c55d71351cd1a90" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="b36a2b48e43a0cc7e5b9387a27be68c2d0587d9e00c37526c0fe2aaefa2eea72" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="4852b3c1ad7c57e773651cce6620cae056bdf60e7f2f09f932eae4586c9b0c4e" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="79655486787fb0ee615dbff6eadcb87ebdef6ee42e11cca3d7ad172386feac08" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="0dce1ae099bace94b453203f635ef093cfe822ea5596b3a5d93583972642331e" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="c3a1e52ca027846001e3e9b22a9af6af3faa44ac475bb8824c4db2a2e3949229" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="647bc5dd8e962fad93f5ec1afed0b9ace50b0c3138364a5fc6541b2d25145f44" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="a9a80bfa49f536d025c583b106658a08501ee94c9343fd219c9ab16a3a4f30b6" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="81c9d9e0c6bb5edc1377753d03b7f700598fb2813df624147063b0d500da22d9" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="53626bc5b00eb8f02d65f48108ea7f9943eccc75a048f07ba8c416f3c2755afb" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="9917d8ef7d6d0efb28717a4a975c490dbb36cf4c6b2890c50c403455fcf93d15" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="a2c4a5d46f752f653a1d8f49156a8a1d6a240560520995f4d6fd9a83e63a070c" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="cbdf882654b94ba496bc758aebee220b957928eab5b68cfde78cf23861ce0efe" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="5329f1b46264ab40278b90bf9d649ff58a93b6cd2ceb025e2eca333890b9034e" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="b3448d477cb72132029bfe2ff7636e9dcb03c20f1bf81da841488cc4e3ab92e5" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="9e725beed319dc3b7a85ed6eb25202c7229deea299f5df2fcebff81f32fea896" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="da7d012c5bbc272449f736f0dc848cc2816d3ee0ab169444cc861beb066b8ca4" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="ca2c49d1970e0ad72258d0c2181cecf20689a6b5e7a9212e5c47dcb7b0c1d41a" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="1db7fb628414cfdf102ab7acc73a0a7b24a7843cf23d9f23eb46576adc2ec80d" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="0b9a8e4165ca0d2dc3dcc688a4fa8bd521aadb63e4111cdb5ae34b4fc496fc71" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="6c4078af9fa64444ed26eb9f535b71922f6d4e25ffce2c4eb0a970d83316c1a5" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="c1d786c867ece97023282edb2f4ccb60d5b69bb94d714968d9501ae49efa9024" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="cadc38a0933e26cfcbe4ac152304dbc0c2a978fa70a9cf67bf8585a14512a792" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="8588b3565982e3549312d5470aa974380efdc45d6c7048dc8187db41bbd66e95" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="4d6cd3b13ad92fe4b7919b708a81c1881e135883fb5b8c41b81880af470f6dc6" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="b4292ba0d23b9dcd7c08b0d6fe41ec47160faee839ee76825614671859345ab0" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="e39c0fbac66151e12c3a913987fa531c7fa252312404a3efda084a01c194c364" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="6743d090bf3e0c82374bc2632d97ee8940f45730802bcfb24736d60bcd5a62ed" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="76fb0fcf92da275d26aebcdd0960f772c64a27368a0b4f453793a9d99bb7918d" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="680f1cf6b707f3e194b01af5d2507df4f181653acb3d778ebf2543ed8806b310" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="b380f0dba201f262af9e589dc607cc3eede69e86bf2aa9b4187c15909eaad214" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="e981b72b0eb2ee0e4ff385c52197852999c1369dddc0100702c5c8c38a967931" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="ae7a52acd56e74debb172a38e9cc2a56b276e02f503df2ac8a6a13c8bea1ad78" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="ce8a9bfd79321d32f01aa2e5f9d90efbeb957f7fac6a0030eb7bd7cf2379037d" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="bb683bcdb1ff71089e48602f89c3c3b8788f0eb0f87eb4ac838ede1a6bae06d6" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="39cb71fb5a9893661d0e393fc35aad8a6b0f12566ba4e330d2de54d2e8a4f4f7" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="d27dd234d0f10547f9e3d0e5fe6f4202334d2390cbf362854d7a1573c6dd843a" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="4c91ef551043301b87bd7ecc87530e74168f5b07a1d6f5a87c585325678a68fb" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="59993e52a8868a7008a2887d4dcc42e0c9e859efa27c70cfeac06defcfa986d4" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="da0226143cbbc2de65c47c25056c73ed678fc92ca4a114c827b805d079349bd9" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="2c7aa8d9e6b0be43131977ecf2d77c2ad1dc9337f130bee0abe15869f1b19e79" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="4ae89776a9a972233e917df6f4ddc3440395b2f14ea46251e270e9532c13d865" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="70b690be0828319d050c28067abfac650de5e65eededb3d26efe438c92f415d9" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="21ff84ee5fa88fc709d91c93751a4e09689d287eb905204acc129652f3582c52" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="d924ff99c84e8d01272e435bdfac992e2190223462a73cc60343ee8b8541c7c5" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="7132324d643af5e750d97033aee27a09930bdf18ed8a75a507507810e6629ab1" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="2a31e6bf2fb56f391aa93d58289e441b7b4c35d367b391974302fdf165a219af" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="6bdb0f69d048b2180ee217615543d0407c7c5a10810bad2a5be2331c9ee79774" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="75370434990b754b909952b9c1c0ebf55cf81595248b8914e8df419f529f02b2" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="780f0a5b58ac9a57f60629bd6e81d90464bdfaed426013477c3fa8830aeade5d" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="4eb3e209cbae54d99ba7fe90122873fb4170ede272b22101f132dcaf15e33f59" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="90d09aa05b42ab397bbccf22faf04f00609df5e99837bd5bba75ace33d57a719" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="2003c1c1feee29756db9a0dd26e5d93f7d7fa4a5f29aaa6a0185aeeed3f4c3cf" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="5d689d0ad9ae82ea1457c601c1f6a8c5bfcf9d3f77a9321f0861ddb18a27537e" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="ed0a1345c2695ad10159f55491b4a2b1e0e1325bf7108410ff1981e1752612e4" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="69b064499a740c81742992e7629d7f236eb8a4317f1550e977e246b7e4e8edc7" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="3f5388d4da7a0cc149c9c6157c10081f5b14b1835325f36f93662eadb4617c20" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="f51fa380f7e90e2ad2ebc43f877426931c63a213f7686cb6cac666a78eacf550" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="87a17731cf277be1ee6bdf7207dcecff22e2bc5214d4e8f46247887935db383c" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="9e65083daba64e8cf9ba27e2e69468b871a5956d3f18b50f19bdb119efa0345c" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="f5e1e8920c7fcd28827ee57c6c0195abdad599d66d63bccb63ce7a71446bc804" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="9b54eb4bffbb9a8bccc17354007beadc4a8d1e139746c410b66d644f0ba5a630" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="99e41317b494535557922db9451c8808471508440d963fa7e499a5559bae7d09" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="284afbab16c76440f5601a2475db83ecb4e14f880416a86fc92e5184bc9970a1" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="90d9dfe796f855cffe5dcd3df86c22bd7bf28db428faf0f188930e0713027004" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="d9271c257b344fc584d5e22fb480566197e738c5e5d0556392e929a9df9a981a" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="53d8629b714b31ecca64236b2fac346af2081cec883e1d8a7c3d889386dd45aa" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="61324caa6a8948aa9b5550fcf267b36d60c9f5c453c517ecae4ea0000950bfbf" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="e5b76ba356168622bf8125e05a104c92d0f6e59232e098abba6b87e4dd84bc11" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="140315ad6e65c4e9453e8cef9334655e087b40a5c33a0e81dc6cc08d6ef3a033" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="ae5f9016e598219aaf9d55d5b319e6621419e9ba8e1505db47aa6234873f8991" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="311bcc789682442104ce943e996450ae87c9c081910d26eb63f127ce66f3f0df" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="e92f6b0419e81689532e310c7948e3175d4345e11977c15dd8e73f0b7fabee6a" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="9551459270bf29d499347105dba98e28149f303ecf0416b72b10476c07eb9b79" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="4e8995bed6dc403a58ea6a98dc0f50d920b7c46f2eb13b87936239714e6120ac" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="dd3b110594e66f4c894e8ec5f3b83bf6a593340a7cb235c529cf3b2b8671a161" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="2f5ae28df94af361d29b8db198584b1763758a1b28035521e9a79378c66d7457" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="5fc64d15c6d60426a110299d6c63e86cef2d3eb90ee124fa01b04ef4a76aa8c6" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="f53c319edef4330574471d27b2512d973396426ceedccd456ded14320a405b3d" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="3bd05e44517df9d6929c0204a8156f84c4bd9e2b51626aebac62f1ab2bb6b649" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="d5626f325ddd4ff277d252cdddb5b3dd155dadbe63b9951a3939e9ed3cae2774" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="3329b383b5c4510eba1eadcb4a234934affdbf94ced2877b20f956b58b52175b" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="f0a9356bbae37e9575fc0ef5ab771bc8ec97e7b6e42b84f755a991f65d6449e5" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="a7e23d1aaffe04fd5ea8ecde846b19cd4148c0fbf34c3a057f0c76b466a0fc21" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="6cb2adaf0e96e40ded891701b302269229935dbb4aa390e5647ddd3c7dba8705" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="61b2bbf68284e8eae8d9496963415b9ee5185ad45d29c181a5cfa390e56551fe" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="272aa51facbcdbd22ee5e7703acc6fe97e7b4f4ac971a4ebc9bfe5283976a566" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="77484612ed122bcfedc3d1805675bed10436b1d9d9e115b783dadd95ec4771f0" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="eac5c1a76e7b7a5a5dc211dd4feb1c5dd65241126172f5a4dd0c25154d844351" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="a64f47b2b4dd5eb3fb7adf8e174425892eeb4825d4f18430f45e327222b289db" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="1e54901f290673cac052b847dd2cc0de9d52050dd4e93addf99710bd54925cad" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="47f9b2ef5ef5f0e01f680cb3ed953d2cdf47d93c1c2bffe041f25cdafaf5241c" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="18f5a2df0832e2daf1255f310112f6ed794e35cc9578214f8d529db021572f61" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="45d5e54b6cef1f1629f35f4237c35dd5c577a6512f0a4bbc0086fcff5fdd0aca" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="97843b12ad657c22f14cbd57dc84287c6cbcf140a334921e9d383f5530bfec13" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="7ec446cd877b3cda4623ccdda4e80e5590637b130d5d4e83bed6ce4564c091da" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="3029143053b01971e9c3f6a9893d6edb4b468c63e4b615925dd82b78899dc736" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="4c3a71a5fdaa185173fdb595de28bc04e0a25c6a9630a4f3405b63c23e0931de" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="936f317571ea4ac747b99c536e3d7e1a89c151c79765bbb7428207e3eec54ec8" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="0380b3472953ea21c0f45241e9247af80a8f4bfa0fee70600a9a0342f22697db" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="9c3322066ae3ce64c22ee91adf61d6ffa65fd3f662bbb43a33e729f09f7b24b4" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="07211878154493eb2c899f286df657538e1afe3360f01a52f0c0b4080af624b2" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="8735027b404cb8dd4b6b9ac61b8387844d84bd53368ec0b361b5180fb8f093a9" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="e86859bb9688e9bef2d66c6aef232d92b860e4664e71f800e2bba69dbef5f03b" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="2a1210c64f07c99b98c065b04a21c0d8491cf51f30dac595ad53e9bf4b30a3a6" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="b5df33012c6e50cf524c586c7345d33b9c74df0d930668d4222c95dc46143648" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="9f362ef4e277c7e8d5b09bb6b53b020a0fe31103ae47e19a06418cb02e549633" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="0dd60d165e3a7caadbfecfd3adf16912c6a0351c7ca2e4670a1fbd1b388b300c" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="e36989d208c314bd5838f1c59635d1cd7d1bb32ef571792f99aee6edd9272466" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="52b3a82b4519c0a17b99ed5bbcca33d9c589d4ae3b222e1e5fb650e80353f5dd" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="bf989263af78a90ab3e1f6722b6b91386d4733235a4726becb9d58e6e1a786d1" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="b486f048560752fed894f6a288f0e7fb0edac8a59f405867d3f15a3ebace0414" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="1293b829d849387119b13ea42e263c4c7063f60959e255f346ca04e4a7d9d391" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="c0dc255bff75755f2479420b689cfdc2769cbe5b162bfcf6301b726a5aa2b713" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="1f2c0c5756296e0f0ba1a357bea7f526b29c71fdde60ac3f27c1a14be3b3f6ed" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="a78e740400cf6107a5193079f0f13edb0f2f0e09fea5f412b116fd6e32986e3a" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="6e10893f7ce659804ae9442fd687fb4bffa5ef282883d29be3d8223ff7a0d2bd" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="d5e4f04787134b8733dd1acdf3fcea200cafc6139e09d3d2e41234501db66276" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="3aaf3e6d905ebb0cfec264420438590cccfea5eeba6c0f0d29d57306f1a388b5" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="71706bd9e658d2e34c285080ee3cf6f58853dd27d1593a2a63e5d034e1d4ca03" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="55ce2375c7a0e1fb3a5e1263051d27ee5dcabe3b6c4371a01ff60105f323e292" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="7fc6aa5d1a29c5398a85bc2c742b6d592c7f23d47e6b20429369697b3f91e078" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="29bd0cca68b8e306287222d8b5c760baac51b1d180c034460a185bdba4a18aba" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="bf0b9a2765fef9ab32a8d442fac50f0b3ca9ecc6119d63853ec99146c7a1d34c" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="921199c68149f995bc5d3484b2ff269cc1d22b73429458a9c586e58998257fd0" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="6594e8c1ecc2cd13979b157ecc18021e347978c89d75906f82250e63630e1ab4" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="569061be1cd381c559815b1de8d2463686f7239ed31531457fd3fe56a0e58881" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="07560cab213deadf901a4870f65d2f306466e30ca1e5cb47994f362e3aa6f033" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="4c420c4372de74e320cfef6431ba24fc98f6bf2026bdd801fb96a4015b5ac61b" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="df78eb9cf8ebda8161b310aec2b5c7160417935b8784d26208e3a141fd9eb931" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="9a5db5375e82f799538f6d01807f8229d551e8eea7e881cb093568b97fc31a7d" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="26258c26d2b5edd9039da76b2ffc2ff919fd94c1884a644beea40d231af8f08b" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="c2d1067a4221667a93e445e6e2c264b4f298ad89bccd51356b239583005f8666" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="120a1aae8496389dc14809c9545fc697aa17982fec7b65014a21efc530adf355" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="bf845939efc728b2d7da140ee99891648241ad4a9755946c2621114cc1cab781" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="0941c1734c92eb9cbe202ccd329ad798b977986076c4a080806c407fe29d9e66" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="a8215eb39e1d3faae8c0bff65ed6e6e1805b12e5e829819b38244ba0eb1ebdaa" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="e50a767b91002544e473125a51f8112b0948fc3d087d58100b1bd9b7ad168ee3" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="17ccf2ac5a72af0e9106a7592fbb4a63a906fbf3ae4653ab251536b71647213c" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="f56fa25f492d808c840958d0f3516c1d644e044b08b6a120af61671a78b01106" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="22f0462692a0ca79dda2867f786a79b4577efb966deb6cbe50b31e50b5ea5408" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="70906ea9e91be705c21183730836c5505ab312632914e8d88967c0e7c0616397" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="94791fcb6e8a4cc64f755e67d8a79799893dd49fbce1ccb5c1cf74ad8ddb193a" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="9f8995fe810839660351a64bba05cc91d27b10e10ba0616284c08463ddffbc34" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="1b8156e0b67fc99a9341ea8f3ec1a4d409de35e9ea16fbebf336db48a4e738a0" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="a704af7bdb3bc33ae2dd815117add0ac43c7174c2a0a51daf3399a2f5d8c05d0" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="03a46e83dca81377ca33b5ffbe9e916b02a54ba2a65a4be5dcd8be77e663a0e2" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="b9b1c423d07a98db192ccfbc35fdd48b4ffcb40747902d8c3a4aae757db89404" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="7dc8a12e8572ca5a3b5593582f6293d21608b23d12cfc8620cc57ea014d98696" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="7e4e6f1627847c171caa0aabe37f6edfb8c647d70061a88a33f9797a0381c23a" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="5f600bbe4588b2476c4acaf1879c1c78b47f309d2fea7015c4a6ce38291b1d88" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="82f49c71a1dd83b455a1ec37e68560b91a900d5d9d3278f7fc1fc3105fa36469" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="ef3b25e03df1f5e5270ff57053f5554142ed1e3b89926e0704775fbccf3b05dd" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="704874737a5a80834351c78f3f11604d45da64e469c2b13d80cea21d8a97b7a2" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="d58abad1ae7cade06c17a33974709e388b0788903205bfe17c70f9c68580e8ba" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="af6f1fdabca02e743bae41a14a3f12f1abf9a4bf356c42cedb5f00342eff0c3e" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="3ea9d0cefd9659d4cc764d0069a55ba1e7c8eb9bf4e4ee166c65feeaf049604a" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="39f5df85087fe45829ecb87bc05124d8771e2a00dbab5d3341945325dca4dc8b" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="dc128122aa7ad54833018dfaa124245937bca2f969f9ff6d460f36240b37dcd6" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="b470ae342675505b65d4a34e4f7638446b472cc25146d5557ec90a75e43f110b" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="031bf0d41c54e25c344d3d91af0cc36c0fbb76fb96865ec59947d9dbd363a199" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="a3a6699d20abbbfcb2df9455ab8299bed69c45e72161cd0d0cc76bbbfaa55eb8" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="a9455ee066622d63127b3cc01786d0ae59c58c062b58311b4423cad868ec41eb" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="161c7aa83698dffcd67d8f55ef5b3951ab5fae12327930ab5534261b48b32693" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="82fd81ae88094443ad883485a9a2d17c84d53048d475e8d0454ab94663501aa7" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="9435320a177d62dc4a93b5fed9c93939a0ac334a49ac8a050196b1c3afc32d98" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="6df990b3aac9394fd26c19e770e549d4742c3db3e7773dfe43fd15f1aacd63fd" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="a060579b32091ec2e79163895608dbce4235ae59f362703266ab1d3a619ff274" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="a11b1f365de888ad9a1e58de04f3ae39f642cad94925c21f4a0ded805cd0bb9e" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="b6d7ab8d1ad3c710a3a945d733b585ad294d1d90f4014cda4cc216b266d1d1e3" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="48b85e2a1a23ba83099f4599d0b1afbf786460327c0d220f58f5a3a5561507ab" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="914e3f744f8e2b706cdc4d3506d20c36cff3240dda23c5d2441b0afc731f9728" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="8ecd9196de5662bb3945feef07969802cac92566fe20b482b2c08a1d02ccb653" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="59e1bc23dac8769a637f9d53ed582da8589663b3009713ca07034c67d84ca383" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="0e11b9397a7243d770b02a43405b239408844a0f634b72c8ef3d1eba24dddfb4" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="8ae7ed32ed677ff94154ad52b998a53050328ba5bb7d3096e9516d53c7f57e92" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="aa506f91c66d7635433479fc593253e1efcd643bedd5d607da73ac89ad452ffb" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="4bbc0ef1bc7ba073accb8ebbc8fa9968f30ab14bafb4c0deb06296e554886f73" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="0f363afddc617f1d7d2450b16eda0994e6471bdbcb31d776785a719ef333b537" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="4c317f5638606bfa2e6c57e8892d6c416d352317c9a06ed111f92d5b83e7df6f" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="8ecb07a4dd65548ff12320bcf4cf157b5146bc2bda8a79b5e18f1803ec0100cc" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="cc4dcacfe0d33a15f6ab328464707954d49ad3e32bf19477190e1fd3788d5540" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="d20285d6e84515430b2a0a5d9c2fc91e0e8154df67cb444c09c64f9294e5453a" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="9e520569c2e37299810ec76afb75f98539c1eae6a57e3dd23029355f1ea619d1" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="1776eb65b2f950e5e899fdaeba7aa6de88e0424770e18908c5c5e15f429e702f" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="c269f7f69e9d95e439aaa467c660762677241b7b863d074431e2f316e8f37d7f" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="68c6b02ae10be238ef2f5defcd039df3c7f3abcfd5f2596bb487420d9dec7e9c" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="0394fca2b90722f8a7bfe629396ffb7b77362e2b75d8ac7c5a7fe92f051c65e5" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="aace8f3e23dcf39bf8b1fdc9838e379063106b5b3912b57bbe4f3125cf6e0e83" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="03911d617b371d0e555730716a4e0068882f946c0b01d62118fae2641217b029" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="89d64eb51206a9855626e6963689ba7fdeef36a490f0661633493e283148e261" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="f5d9f73a6955058af0c39fa1b983f2b0c3abe106f4327d1e88bca02f7b95fb02" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="7ca39028e46bac7f8960abe51133afd549dbc451f8def83c072b639482858a82" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="57bc08fb9ef84597d87e1a7d6c69a096c34c109ff50e5ff4f2455af9e76ea72e" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="364f1c3083fc95c6907a6a3531b30229d720e186a2d167066ee4f4f0b844c52f" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="7fbee96a9833825f50571540c054aec968d0aa873d5d30a964aeaa081a3df84a" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="5ca8f75d00af0affff25fcfdb91055ba60f37a91445fc7f2ef5addf003b228c3" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="867fd68e7ec1661115c8f6f43ae0a6f320f1f0bb72cb44be4d1ab31e2656281a" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="856e520d7d44b373e3a219c90cb7d2016d7aea57c863540eccfe32a27b5c8373" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="fd4faecd3fc7479401b7a6da6ad47f196e5ec7c48b86f908065370c205d55aa1" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="05b6c8d735a998c1b3c0a3a324dd05fc1a0923978077c671f521a28dc02d3e66" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="07cd68699496d3db5642257bc5a054c0839f44b410846f89149597c98468674d" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="4a261c0b010720cad535c33e49e4f69c32b95eefa2cb3c29e4f55b7ac1ff5091" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="191b5fcb478eb82b89c5e0e98cef64bbda9f0fbf1acaffb22ab83120d2834392" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="ac9aacc9055323d2d97b997c0372dca52c6c91aee09860a462a2c9b656deddb7" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="e705709a0838f6ca790cabd0efc1b0ed1537690f523d20fc4280b5c979f7d680" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="96446a096c35fbc24d3bebea358db5697ce92edb84c14d1f3f0c28d578eba69e" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="7cddc7c788f30e6e17f0705117438f436c0a191e42db2326e646763625ff6ef3" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="c56d8a1ebad712f635414e9ced5b3568bf324885902544b9c22ae6dc6f1f801f" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="c657a08aaf9506de69f21a2bb8ad812226eef11bd20e6831c3f0ce2a995ceed0" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="200ca7f0f8b4a2edd1b36daf8e85687fbc4da6d6833b658074b211a56c599967" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="ee06c46bd73c8c2e68b8970f79338a8226b7832c6861b3f4c69ba7206ecc244b" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="2178735b8e49d5de1be7c46669cd5ad8b9b1d8b740c76297fc087983953fd974" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="a598b2cb7b067c3d5077e609c95a6c944cc8adfb368504b3ccad2e6739f57c43" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="1399cef38fcdc21eca1f5c455d0f3d44d336520ab93aa72b81dd70f8d729c553" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="3dbc84a4747641cd61c4d631046585382fa59462db347df7f6a562e353fabfbb" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="6aeebd5ef8cf2fec80fe231997c46e245a932f6dce9655115d59a61704975157" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="baa65747c963b1a5e353363e22c99a9d7a6f78ba7a5c2efac598762b41e9d1ec" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="1c6c204eda5d24c0eaf1a4345e3bb9d14d49c47d1fb2db1c53b5cfe999d2867e" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="0c834073ebf3ae784c7ace122699f8dff95a1a55bd6ae961f6a55109620d8240" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="1b3fe1420bb9bd009362f48c0c94cd5e96b71bfd0b034ee61950ae344f07e876" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="b10cb7b581f40624eec971b6adaaf06752bbe789d92f9aefb6bbf5f5cf2e077c" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="946a86d5018f941764d35458984d237fda4e98dbf1ac2f32edb092ba80e02711" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="dc1da4b2ee8362821a6614656e613b6db845fec73b9886d721d59fe25f69e118" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="f7bc1d362937d07582925883fbce23cf9fd1d6d24533b69f20ea2837f58f0bbf" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="f2b2872f111b00a4df2c7908946fb777f4163fecc18a7bd4724eac47edf390dd" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="e23af3de70b2b75b4cb5ec75dd6674e05a38a0ab7749d4120f888c13d8b98de1" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="fb8312daa1b39b792153676e031927019442cf35e29da180f3e419fe48f360fb" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="d43a4e2ce29420c34bc4a12bd5469039f72c30f3b7b83e62e6ff6ed8f210cbac" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="25e9ae216885fcfcecec0a0071eb36e4b47c88d182744bea0aa2fca89c3b8260" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="d4594b3f736718a92ff24ce01ee8a5c55687e5a9c786015b5d9f78bed90ec3bd" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="4b45cb0150cefa6cd09e580b8a244f8d45c439cb86db0f564010331090ba7b15" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="ecf3f680b099140426fcfd449c312295d7a20759613f0f4b97391693efc93756" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="b011609366673539133757cb5e3811dbf91becf3f91ad6c7415051ad2da6cbd9" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="ab8a248356c85bbcf3e4d042607fc6a4cc23b1b2e7bb4121da9ecf19dfcf841f" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="e428458abeda968b946e17744e12a7569cf61c9d0332977d487c53bb20b2263d" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="1ce736548fe69b1800bec206a9cdcae208526fbdeb0bcd9fc5647f9f50e52572" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="4eda45ae8d591a3da2ec2a75810bb5348ad46369de36e7d99ed358e00da66285" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="1b4094a53f2f456a76de6c3e14c3deb1b0db4807504b1b6a37afa8cb3f49b970" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="c56f9660cf285cc75b3867636c4385501da820a7e44ec518b7ab172f5c8c3828" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="98cac1d75c3cd9e26486ca8e6742194c998a44fa73e5074e016de7d134960223" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="1f99c6375aff0014c660891cfd6911c6bf41188e8b39bbc41d71f268e67b05b7" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="67b52f4d5681848dd00856aa2e38c6e9cdd00367bea6befa1401cb8ce7715138" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="8a828cd27e9a50e13aa34e2bd23be6dffbb121eea48efcddc1971d4d191d67eb" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="b790b5a926d2425689ddf268db1a07699bbb3c1804d6d0d49845049fe05b38c0" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="0e7e28e5907164bb4d30b010cbedf18772a55e0b3b428bd514411f51b9f9b738" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="65d42d5e53c8c873b1af9f095da1b7a7725013703139153e05ab59d490afb3b3" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="9496259eb671af1d591a85856229b7e5fb0aa2a059e196725609d7cda92e8185" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="6730a51ff19cfe5da4b4bff7dbe5231eca916e8f9323bbba2363d888f381e0e2" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="ed29dce3a8d99b28aebb1b9b681e235197292653c86d28aab6e222f85c2b5286" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="ec65d755e014aa8b723aa21e72be77de1d81bb0faf4a802cffd27a4557d5836c" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="48171f5b4af6976d5ed12c36a8d15f1b0336a92cd0a82a746805148bcea6b0a1" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="bc7399b8ebbd87cdd9e0b62c543912566caa99319823281a150f69c3bbf2a667" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="0ff5e153897ddd6990260d0319b4e7174ff5c0c4c4d97f9ecd5ce898d751094d" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="d0077817b1619538d38dbbae6f84d6e361966e89933994912ecc7068e4319b1e" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="21dafe65cd41c5c4a4b5d94e1fdab2666121fc9d42c0def270585976eacee3ce" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="77a13810b63c6a49131916c164c81b9116d070b4830437505c01df42a0affb07" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="33d025993ca49d7affd48cb5df3f2a27635d0cae6afdfabe4c1ab3e1e5be00a4" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="2f175d1957aeb62ab3d70377632883ce1f849958e82aaf4ea2447fc40dbca479" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="a6e816b1f7f2b54466cfcd71bd7989ff47ee3a88904111e83004d6cbfc4430ee" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="7d6ba5d8b2cb7f62b6ea1dd24fd0455af8638a3a0d0c2ad0aba12054c8e825f8" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="33674067c2aff6e45b87a7c605842a209a03e25fe9b1e373d2371c06d1f80c58" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="507054c17989180579ac3dd9f4ae51ce043aa56660743671a7368a093ce5f8ca" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="40d7b28d23dde47ed2e5120e37c40bcfeb39c5913220f1cf21a744a09b8e2c04" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="cb3d272fa53e78a0e2fd754923b012b0e16008155caa735a6f5044fcb9d0ea52" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="b20ca8fc6038cf31fc649edfce0dfe28ce853d27d611cc0990f79d96b54f842b" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="1f4ddd1f3b4a60552fbd08fd31bbf3f1916abee37e028de1a1709c5b50e06fa7" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="eda208f19dde44a1abbe7c176c2795e18d61cd25a586d0e30181059381b969b1" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="0d18c43dfd9ece312894309809576a59cc17afa53c067dfb3fca4b5916fc8166" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="96132e057806bbedb7d6798c22db048394f6f01829d07eca053f8af64d8b6357" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="33c7e05d0ad86c51196ddabeab66fc62eb4c121d5d856267e1c71f25df5b3b1d" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="f278ed2d44a1387d5bb8a5f2f1723a272923799cbc4f0da72b4ac828b69f5302" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="7d362af6254c681adcc0ff2745e50526000187e6409cf6d9b5285c43bcce6fff" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="d402a4acabf69adcd6220c5c4c62b4ec9bbbcc7db46296f3a1dc2ed97b4febfa" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="2e56f64d3c7951efe49796282fdaf8dbdb847de747e857f2ebd05a3df7c9cef6" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="d9c390721789db813684f9b0369d2fa4f9b89f790b551d0401c1b94005c9f679" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="134980818ea6952db2aa82a165330c2d062bd19ea2b0df2ef48e36ebd52ce169" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="6544272f942a6a8ded8cb18abb232e63b72394dc41a42239bd6b27ce08abd547" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="47fe88fdef26ca43ce49307d9d51e650670854af3743a218acc235223a213b55" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="03000399b4fc4cd279c3efdf2e4aea4ab29c1f5f0d817bda1ec1177ba3de124c" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="ef8306acb9b3aad01bde6e7b354696054abe5f9ed73448903f64a5e9706c2b8e" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="25a17146ab57518cf564570d9269a0769fd15fc7ec52f6ed0f33bef79df4eeff" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="0c545deb5b5eb012e8f7571f3921e427751f2be48e4846095a513af4c430c844" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="c66e0c2f4f34b20e65688ac9c6ed176c4d7a0e35a02a497942762d737f65941d" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="8c71854ef75f0b0ec4224857b6336bd9cee43ecf3d89ce8de5292f30c78d1ffb" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="d197af2a58ff6c7e670aa50c6b4e0fef922a31ae9dfdc50e99f8e25a1de24e1a" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="6d62a084f8bcdd0ebdd9cb36330d0b26ab00800810c2fdc330489ed9f0a62286" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="8c700d09d0e8e9c63395e9fc0dda286c3d831467e8a15b43540a2604124aa347" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="475a9be55ca22239bbbb590c9d18b01f7cf567b69403749cadcd28a97e538df8" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="3edffdcf4267c4abb7de256c7e02af524170606da90ae0be3dcf81daf28720e5" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="a3f2b29001db60b66f226e82e383e20851de585ae6b79dda15af7e7fc2e4cac7" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="4b35c89f77d716fd2bafc2c8c59b6b32e5f0bf62f16e1d951ad934105c073fb7" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="c624e9f53a74deea6b685d51bdeec4c15c7f1e39a13d994f70a627e42ff3f0fa" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="0c257b06b422df85137da8788d0c55bd40f5385fcad7d98dc1ade3aa1f76376b" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="dc4a9bbfdcb48c1c34d415d4b0af94ccda1fd82445574f39583b164ccceda995" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="16b0068d5ae2729081ab9092add79ff2de5ecd0d8d02397f849ba004a3937d92" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="023774d5e30e2ad7c938b8aa5a9da07ca5612e822cb6b4386b5336b94481e5ef" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="e8f53e8b4b1192aa029ef2ca133f26d1d95d03eec758826b44c1e6669edf47d6" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="c9d0a1301a5d3548bf02435539c12acac639b203b7f2a837ceb4d44727cb9d57" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="aec5f394e95ee23ac72296fc0dc46dc3dc2900d332a5cb314591e2a26ec4ed31" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="bfe4977652814ce1a473d75bd1c6a1c58146b4561bb6c6d7a460d681888202b4" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
</package>
<package pkgid="1f8b2a9507017c4a1e31d0ffa3cc7324c99ab71c3273bfe9b7afee77e6a81592" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="249.0.0.152.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
</package>
<package pkgid="c2b8e89a1a44c0aaee731e9e0d795a8f705a1b3ac66d3b4963968ddbe50c699e" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="250.0.0.154.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
</package>
<package pkgid="cd8e3f1917a17792b1ec98fa39719b1ab128855f5caaed3e502547e71f836a7c" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="251.0.0.155.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
</package>
<package pkgid="d5f161ee9b50e3a777e1bcd9419c0fb3257a4ead8212a45b2fcd52c24e2350d2" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="252.0.0.156.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-248.0.0.147" date="1738843200">- !14995  mm/compaction: fix UBSAN shift-out-of-bounds warning
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- !14894  btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- !14875  *** jffs2: Prevent rtime decompress memory corruption ***
- !14960  mainline to olk-5.10 RDMA/hns: Check atomic wr length
- !14937 v2  Two CVE fixes for ksmbd
- !14966  memcg: fix memcg_swapmax_read() not declared warning
- memcg: fix memcg_swapmax_read() not declared warning
- RDMA/hns: Check atomic wr length
- Revert "RDMA/hns: Fix a missing check of atomic wr length"
- Revert "RDMA/hns: Check atomic wr length"
- !14943  fix CVE-2024-57892
- !14954  zram: fix NULL pointer in comp_algorithm_show()
- !14948 Mainline patch to olk-5.10 v3
- zram: fix NULL pointer in comp_algorithm_show()
- !14247 [OLK-5.10] fix wangxun 1G/10G drivers hardware tx unit hang.
- !14947  mm/slub: Reduce memory consumption in extreme scenarios
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- Revert "RDMA/hns: Fix different dgids mapping to the same dip_idx"
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- mm/slub: Reduce memory consumption in extreme scenarios
- !14917  merge CVE patches into OLK-5.10
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
- ocfs2: correct return value of ocfs2_local_free_info()
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: wangxun: change netdev uc addr num maxmium
- net: wangxun: fix resolving ipv6 pakets extension header errors
- net: wangxun: fix tx csum by soft except tcp udp sctp
- drm/i915: Fix potential context UAFs
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
- arm64: probes: Fix uprobes for big-endian kernels
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM
- kcsan: Turn report_filterlist_lock into a raw_spinlock
- media: uvcvideo: Require entities to have a non-zero unique ID
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- um: net: Do not use drvdata in release
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe()
- 9p/xen: fix release of IRQ
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- fbdev/sh7760fb: Alloc DMA memory from hardware device
- ionic: Fix netdev notifier unregister on failure
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount
- jffs2: Fix rtime decompressor
- jffs2: Prevent rtime decompress memory corruption</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.148" date="1738843201">- kernel.spec: avoid kernel package name dependency by other software packages for 64KB page size kernel</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843202">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843203">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843204">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
</package>
<package pkgid="52be50eb42c24a47078cb3fd4ec806600d75e2cfdd58a866d200bf4bbf39e2ab" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="254.0.0.158.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.149" date="1738843200">- kernel.spec: build kernel tools for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.150" date="1738843201">- kernel.spec: fix posttrans kernel scriptlet failed for 64KB version</changelog>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843202">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
</package>
<package pkgid="ff62b91db534f254085e79eca3fc43e76b771753164a960e919217fd7ef9dd5f" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="257.0.0.160.oe2203sp4"/>
  <changelog author="Zheng Zengkai &lt;zhengzengkai@huawei.com&gt; - 5.10.0-248.0.0.151" date="1738843200">- kernel.spec: remove the PA/VA BITS change for 64KB page size kernel</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.152" date="1739361600">- !15061  ALSA: seq: oss: Fix races at processing SysEx messages
- ALSA: seq: oss: Fix races at processing SysEx messages
- !14286 [OLK-5.10] SCSI: Support Linkdata HBA/RAID Controllers
- !15059  RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- RDMA/hns: Fix free_mr_qp not assigning qp-&gt;device in error flow
- !15051  iio: light: vcnl4035: fix information leak in triggered buffer
- !9883 AMD QoS new features BMEC and SMBA
- iio: light: vcnl4035: fix information leak in triggered buffer
- !14956  nbd: don't allow reconnect after disconnect
- !15046  pinmux: Use sequential access to access desc-&gt;pinmux data
- !15015  spi: mpc52xx: Add cancel_work_sync before module remove
- !14865  fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference
- [PATCH] SCSI: Linkdata: Supports Linkdata HBA/RAID Controllers
- pinmux: Use sequential access to access desc-&gt;pinmux data
- !15044 [sync] PR-15042:  drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- !15024  net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !14991  usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- !14891  s390/cpum_sf: Handle CPU hotplug remove during sampling
- !15014 v2  nilfs2: prevent use of deleted inode
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- !15010  nvme-rdma: unquiesce admin_q before destroy it
- spi: mpc52xx: Add cancel_work_sync before module remove
- nilfs2: prevent use of deleted inode
- nvme-rdma: unquiesce admin_q before destroy it
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- tools headers cpufeatures: Sync with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Remove redundant variable in mbm_config_write_domain()
- x86/resctrl: Add per-rmid arch private storage for overflow and chunks
- x86/resctrl: Group struct rdt_hw_domain cleanup
- x86/resctrl: Add domain online callback for resctrl work
- x86/resctrl: Merge mon_capable and mon_enabled
- x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu()
- x86/resctrl: Split struct rdt_domain
- x86/resctrl: Add interface to write mbm_local_bytes_config
- x86/resctrl: Add interface to write mbm_total_bytes_config
- x86/resctrl: Add interface to read mbm_local_bytes_config
- x86/resctrl: Add interface to read mbm_total_bytes_config
- x86/resctrl: Support monitor configuration
- x86/resctrl: Add __init attribute to rdt_get_mon_l3_config()
- x86/resctrl: Detect and configure Slow Memory Bandwidth Allocation
- x86/resctrl: Move MSR defines into msr-index.h
- x86/resctrl: Include new features in command line options
- x86/cpufeatures: Add Bandwidth Monitoring Event Configuration feature flag
- x86/resctrl: Add a new resource type RDT_RESOURCE_SMBA
- x86/cpufeatures: Add Slow Memory Bandwidth Allocation feature flag
- x86/resctrl: Replace smp_call_function_many() with on_each_cpu_mask()
- x86/resctrl: Split struct rdt_resource
- x86/resctrl: Fix kernel-doc in internal.h
- x86/resctrl: Correct MBM total and local values
- nbd: don't allow reconnect after disconnect
- s390/cpum_sf: Handle CPU hotplug remove during sampling
- fs/dirty_pages: Add exclusive open lock to prevent null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
</package>
<package pkgid="372b80a87fadd9d996ab211a8845fbab51c92f76699a643db0b9db0f1a8a3bc8" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="259.0.0.162.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-249.0.0.153" date="1739880000">- perf: no longer complie libtraceevent into perf</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
</package>
<package pkgid="87223331b06d169b49cd8af34bd1a423004da09b6146371e5bb2ccb1557138ed" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="260.0.0.163.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-250.0.0.154" date="1739966400">- !15099  sched: sch_cake: add bounds checks to host bulk flow fairness counts
- !15087  netfilter: ipset: add missing range check in bitmap_ip_uadt
- !15085  ila: call nf_unregister_net_hooks() sooner
- !15100  ila: serialize calls to nf_register_net_hooks()
- !15097  net: inet6: do not leave a dangling sk pointer in inet6_create()
- !15096  net: inet: do not leave a dangling sk pointer in inet_create()
- !15098  netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- !15089  net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- !15086  net: Fix CVE-2024-50125
- !15117 v3  net: Fix CVE-2024-56658
- !15095  wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- !15124 v2  fix CVE-2024-53056 for olk-5.10
- !15129  comedi: Flush partial mappings in error case
- !15127  iomap: avoid avoid truncating 64-bit offset to 32 bits
- comedi: Flush partial mappings in error case
- iomap: avoid avoid truncating 64-bit offset to 32 bits
- mm: resolve faulty mmap_region() error path behaviour
- mm: unconditionally close VMAs on error
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- !15081  usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- !15079  drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- net: Fix kabi breakage in struct net
- net: defer final 'struct net' free in netns dismantle
- ila: serialize calls to nf_register_net_hooks()
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
- net: inet6: do not leave a dangling sk pointer in inet6_create()
- net: inet: do not leave a dangling sk pointer in inet_create()
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- netfilter: ipset: add missing range check in bitmap_ip_uadt
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: call sock_hold earlier in sco_conn_del
- ila: call nf_unregister_net_hooks() sooner
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
</package>
<package pkgid="9db01864516e8c2f57fb560c2d58b7ee8b66a26b0b0e93850871551cbc932685" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="261.0.0.164.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-251.0.0.155" date="1740484800">- !14327 [OLK-5.10] Enhanced Hygon processor's processing capabilities for large memory copying
- !15137  net/mlx5: Fix variable not being completed when function returns
- !15136  crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- !15134  usb: typec: altmode should keep reference to parent
- !15198  CVE-2024-57857
- !15196  iio: pressure: zpa2326: fix information leak in triggered buffer
- !15199  power: supply: gpio-charger: Fix set charge current limits
- power: supply: gpio-charger: Fix set charge current limits
- RDMA/siw: Remove direct link to net_device
- RDMA/siw: Fabricate a GID on tun and loopback devices
- RDMA/siw: Use helper function to set sys_image_guid
- RDMA/siw: Enable siw on tunnel devices
- iio: pressure: zpa2326: fix information leak in triggered buffer
- !15186  CVE-2024-57795
- !15177  iio: imu: kmx61: fix information leak in triggered buffer
- RDMA/rxe: Remove the direct link to net_device
- RDMA: Export ib_device_get_netdev()
- iio: imu: kmx61: fix information leak in triggered buffer
- !14910 KVM:arm64:Add a kvm parameter to control guest wfi trapping
- KVM:arm64:Add a kvm parameter to control guest wfi trapping
- !15139  apparmor: fix 'Do simple duplicate message elimination'
- !15094  netfilter: x_tables: fix LED ID check in led_tg_check()
- !15146  Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- !15077  kasan: fix incorrect return type of quarantine_put()
- Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
- apparmor: fix 'Do simple duplicate message elimination'
- net/mlx5: Fix variable not being completed when function returns
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- usb: typec: altmode should keep reference to parent
- netfilter: x_tables: fix LED ID check in led_tg_check()
- kasan: fix incorrect return type of quarantine_put()
- mm: Enhanced copy capabilities for Hygon processor</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
</package>
<package pkgid="5fabd1c602bbd13767f1229453acd0ffcd0c7890d8b7e5064a0e3b0c10bce527" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="262.0.0.165.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-252.0.0.156" date="1741089600">- !15293 ras: ACPI: HED: Always initialize before evged
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- !15269 [OLK-5.10]Intel: Backport to fix EDAC driver for GNR platform
- ras: ACPI: HED: Always initialize before evged
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,skx,i10nm}: Move the common debug code to skx_common
- EDAC, i10nm: make skx_common.o a separate module
- !15246  UBI/UBIFS mainline patch backport
- !10860 [OLK-5.10] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- ubi: Add a check for ubi_num
- ubifs: skip dumping tnc tree when zroot is null
- !15228 EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- !14810  af_packet: avoid erroring out after sock_init_data() in packet_create()
- EDAC/amd64: Add support family types for hygon family 4h~5h and 7h.
- af_packet: avoid erroring out after sock_init_data() in packet_create()
- perf/x86/uncore: Add support for Hygon family 18h model 4h-7h and 10h DF PMU</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
</package>
<package pkgid="949b721d9949d88cff87d808c4d8f318156f3a30762d3dbf07377a36b2fda626" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="263.0.0.166.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-253.0.0.157" date="1741694400">- !15447  Some bug fix patches for RDMA/hns to olk-5.10
- !15429 mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- RDMA/hns: Fix default congestion control algorithm not set for kernel QP
- RDMA/hns: Fix udca not unregistered when reset entry allocation failed
- RDMA/hns: Fix wrong value of max_sge_rd
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
- RDMA/hns: Fix invalid sq params not being blocked
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix DCA error path in alloc_wqe_buf()
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15419  NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15300 net: hns3: some bugfixes for hns3 driver
- !15300 net: hns3: some bugfixes for hns3 driver
- !15422  ocfs2: handle a symlink read error correctly
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15426 Some bug fix patches for OLK-5.10 hns RoCE
- !15428  ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- RDMA/hns: Fix ifnullfree static warning
- RDMA/hns: Fix soft lockup by adding cond_resched() to bt pages loop
- RDMA/hns: Fix unmatched kmalloc and kvfree
- RDMA/hns: Fix delay-destruction mechanism not processing kernel db
- RDMA/hns: Fix delayed destruction of db not taking effect
- RDMA/hns: Move mtr_node into the mtr struct
- RDMA/hns: Change mtr member to pointer in hns QP/CQ/MR/SRQ/EQ struct
- net: hns3: add command queue trace for hns3
- net: hns3: Revert "net: hns3: add command queue trace for hns3"
- ocfs2: handle a symlink read error correctly
- net: hns3: add mac tunnel number query
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15053  try to backport "block: fix rq-qos breakage from skipping rq_qos_done_bio"
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15403  ipmr: do not call mr_mfc_uses_dev() for unres entries
- !15413  CVE-2025-21756
- !15413  CVE-2025-21756
- vsock: Orphan socket after transport release
- vsock: Keep the binding until socket destruction
- !15397  Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- !15295  netfilter: nf_set_pipapo: fix initial map fill
- ipmr: do not call mr_mfc_uses_dev() for unres entries
- net: hns3: fix oops when unload drivers paralleling
- !15382  srcu: Tighten cleanup_srcu_struct() GP checks
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- !15387  crypto: qat - add param check for DH
- !15389  orangefs: fix a oob in orangefs_debug_write
- !15373  KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- !15241 KVM: arm64: pvsched bugfix and module param
- orangefs: fix a oob in orangefs_debug_write
- crypto: qat - add param check for DH
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15226 Fix northbridge init warning in guest for Hygon family 18h model 4h
- !15217 Add device HID for Hygon GPIO controller
- !15217 Add device HID for Hygon GPIO controller
- srcu: Tighten cleanup_srcu_struct() GP checks
- !15232  smb: client: Fix netns refcount imbalance
- !15232  smb: client: Fix netns refcount imbalance
- !15348  Mainline Patch
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- bpf: Send signals asynchronously if !preemptible
- KVM:arm64:Add a module param to enable/disable pv_preempted dynamically
- !15307  net: sfc: add missing xdp queue reinitialization
- !15279 [OLK-5.10]:update patches for sw64 architecture
- !15279 [OLK-5.10]:update patches for sw64 architecture
- net: sfc: add missing xdp queue reinitialization
- netfilter: nf_set_pipapo: fix initial map fill
- sw64: pci: add new files to help support ACPI-based PCI initialization
- sw64: acpi: disable INTC initialization via ACPI MADT table
- sw64: pci: bypass legacy PCI initialization when ACPI enabled
- sw64: acpi: use early param to control whether ACPI is enabled
- sw64: acpi: disable all ACPI features by default
- pci: let pcibios_root_bridge_prepare() access bridge-&gt;windows
- sw64: fix kernel crash caused by unaligned access exception
- sw64: iommu: adjust iova map space
- sw64: msi: split the msi file
- sw64: use generic dma_direct_ops
- sw64: fix cpu reduction bug in cpuautoplug
- sw64: use generated macro in vrt_sigreturn.S
- sw64: do not allow assembler reorder in __copy_user()
- sw64: expand vmemmap
- sw64: iommu: fix dma_supported of dma_ops
- sw64: add support for TIF_NOTIFY_SIGNAL
- sw64: fix stack trace error
- sw64: register suspend entry for cpu 0 only
- sw64: do not discard exit text at link time
- sw64: fix syscall restart
- sw64: usb: redefine some macros
- sw64: iommu: upgrade sunway_iommu_v2 driver to make it work
- sw64: fix syscall sigreturn and rt_sigreturn
- sw64: optimize hmcall rdusp() and wrusp()
- sw64: rewrite syscall invocation in C
- sw64: expand struct pt_regs
- sw64: kvm: delete kvm_sw64_ops structure
- sw64: add imemb at the end of fixup_hmcall()
- sw64: c3b: get MCLK rate dynamically according to specification
- sw64: fix default short clock rate
- sw64: use call and br in kernel entry
- sw64: modify do_[rt_]sigreturn
- sw64: modify fixup_exception()
- sw64: rewrite struct pt_regs
- sw64: simplify pt_regs related code
- sw64: fix pt_regs related code
- sw64: avoid using wrusp()
- sw64: use sp in pt_regs
- sw64: kvm: move bind vcpu init code into kvm_core3.c
- sw64: add arch/sw_64/Kbuild
- sw64: Kconfig: clean up out-of-date deep sleep options
- sw64: Kconfig: rename BUILTIN_DTB option
- sw64: optimize C4 compilation
- sw64: kprobe: allow kprobe in atomic sequence on C4
- sw64: lib: optimize lib functions for C4
- sw64: optimize __fpstate_save on C4
- sw64: add new match interface for C4
- sw64: add C4 FPE_INTDIV support
- sw64: update default FPCR value
- sw64: defconfig: add junzhang_defconfig for C4 serials
- sw64: add basic support for C4 ISA
- sw64: use PAGE_OFFSET as ktext address head
- sw64: dts: add an empty dts to support SW8A temporarily
- sw64: kconfig: add SW8A platform support
- sw64: kvm: rebuild Core3 and Core4 virtualization
- sw64: kvm: add support for Core4 memory virtualization
- sw64: kvm: add config guard for C3B implementation
- sw64: kvm: add C4 vcpu support
- sw64: iommu: add new iommu v2 support
- sw64: pci: add C4 PCI_MSI support
- sw64: pci: add C4 PCI support
- sw64: irq: add basic C4 irq support
- sw64: timer: add C4 timer support
- sw64: unify io operations interface for C3B and C4
- sw64: add SW8A io addresses
- sw64: mm: add C4 hugetlb support
- sw64: mm: add C4 MMU support
- sw64: topology: add C4 topology info
- sw64: add C4 CSRs
- sw64: add C4 barriers support
- sw64: add C4 xchg operations support
- sw64: add C4 bit operations support
- sw64: add C4 atomic operations support
- sw64: redesign __cpu_to_rcid initialization
- sw64: topology: modify topology defines
- sw64: rename some fields of struct vcpucb
- sw64: mm: use static ZERO_PAGE
- sw64: mm: unify _PAGE_CHG_MASK and _HPAGE_CHG_MASK
- sw64: mm: add more helpers to pgtable.h
- sw64: mm: fix _PFN_MASK
- sw64: mm: add _PAGE_CONT helpers
- sw64: pci: rename PCI_DEVICE_ID_CHIP3
- sw64: mm: rename _PAGE_PHU and _PAGE_PSE
- sw64: remove unused file
- sw64: remove out-of-date LOCK_FIXUP
- sw64: fix compile error when CONFIG_PM is not set
- sw64: kconfig: fix config error when PCI_MSI is not set
- sw64: cpufreq: fix clockevents update method
- sw64: fix excessive timer interrupts
- sw64: simplify PMC interfaces
- sw64: remove sw64_platform_ops
- sw64: remove chip directory
- sw64: reorganize pci setup related code
- sw64: reorganize chip setup code
- sw64: reorganize msi related code
- sw64: reorganize basic irq handling code
- sw64: reorganize pci related quirks
- sw64: reorganize usb quirks related code
- sw64: reorganize i2c related code
- sw64: reorganize timer related code
- sw64: reorganize cpu frequency related code
- i2c: designware: add parameter MODEL_SUNWAY
- sw64: fix compile warnings
- sw64: cleanup hugetlb code
- sw64: drop fpga and simulator support
- sw64: fix indent of inline assembly
- sw64: fix header include guards
- sw64: add missing fallthrough
- sw64: add missing break
- sw64: Kconfig: remove out-of-date rwsem options
- sw64: fix frequency in cpufreq_frequency_table
- sw64: fix incorrect hmcalls in the virtual machine
- sw64: remove arch overridden RLIM_INFINITY
- sw64: do not set __ARCH_SI_TRAPNO
- sw64: remove C3A support
- sw64: fix s4 sleep bug
- sw64: reorganize dependency of devmap helpers
- i2c: sunway: do some cleanup for old i2c driver
- i2c: designware: add sunway system I2C support
- sw64: pci: use pci_has_flag to define pcibios_assign_all_busses
- sw64: modify lock instruction
- sw64: update openeuler_defconfig
- sw64: add save_stack_trace_regs()
- sw64: tools: fix selftests/sigaltstack for sw64
- sw64: determine external clock according to specification
- sw64: fix uretprobe implementation
- sw64: fix some cpu autoplug bugs
- sw64: kvm: add support for cpu offline and online in guest
- fbdev: sw64 use __raw I/O memory api
- sw64: correct the definition of MAX_DMA_ADDRESS
- sw64: remove S3 flag
- sw64: rename ptrace macros
- sw64: fix audit_syscall_exit()
- sw64: fix some include format
- sw64: update cpufreq's info when cpu frequency changed
- sw64: fix a compile error with CONFIG_TRANSPARENT_HUGEPAGE=n
- sw64: selftests/ftrace: add sw64 support for kprobe args tests
- sw64: hibernation: update ktp to vcpucb after restoring it
- sw64: fix CONFIG_GENERIC_SCHED_CLOCK=y
- sw64: kvm: fix memory hotplug support for guest
- sw64: hugetlbfs: add arch_hugetlb_valid_size
- sw64: kvm: fix some build errors for KVM module
- sw64: perf: add libbfd-buildid and disassembler-four-args support
- sw64: fix a compile error for headers_install
- sw64: fix shared_cpu_map of tcache's cacheinfo
- sw64: kvm: fix an error with non-8MB aligned guest RAM size
- sw64: selftests/vm: fix virtual address range mapping test
- sw64: fix KBUILD_DEFCONFIG
- sw64: send a fake signal to all blocking tasks
- sw64: clean up useless cpu_idle wrap
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free
- smb: client: fix TCP timers deadlock after rmmod
- x86/amd_nb: Fix northbridge init warning in guest for Hygon family 18h model 4h
- pinctrl: Add device HID for Hygon GPIO controller
- block: fix kabi broken due to removing bip_slab
- block: fix kabi broken
- block: fix rq-qos breakage from skipping rq_qos_done_bio()
- block: only mark bio as tracked if it really is tracked
- block: add a BUILD_BUG_ON() for adding more bio flags than we have space
- block: use bi_max_vecs to find the bvec pool
- md/raid10: remove dead code in reshape_request
- block: mark the bio as cloned in bio_iov_bvec_set
- block: turn the nr_iovecs argument to bio_alloc* into an unsigned short
- block: remove the 1 and 4 vec bvec_slabs entries
- block: streamline bvec_alloc
- block: factor out a bvec_alloc_gfp helper
- block: move struct biovec_slab to bio.c
- block: reuse BIO_INLINE_VECS for integrity bvecs</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-254.0.0.158" date="1741780800">- !15460 v2  soc: hisilicon: Add checks against NULL pointer reference
- !15456  soc: hisilicon: Fix one printing issue and simplify some printing
- !15454  RDMA/hns: Fix mbox timing out by adding retry mechanism
- soc: hisilicon: Add checks against NULL pointer reference
- soc: hisilicon: Fix one printing issue and simplify some printing
- !15391  backport mainline bugfix patch
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- genirq: Make handle_enforce_irqctx() unconditionally available</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
</package>
<package pkgid="1a7a7b666211343b8254cda63404f006b42a2ccd16569ae8d797ae5c04ce933e" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="265.0.0.168.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-256.0.0.159" date="1742904000">- !15379  bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- !15606  Fix instance dir use-after-free in tracefs
- !15272 [Intel-SIG] 5.10-x86/cpu: Clearwater Forest new model and ISAs support.
- tracing: Fix illegal address access of trace_event_file in tracing_release_file_tr()
- tracing: Avoid use-after-free in tracing_open_file_tr()
- !15591 【olk 5.10】revert and backport a bugfix
- net: hns3: add mac tunnel number query
- Revert "net: hns3: add mac tunnel number query"
- !15501  module: fix [e_shstrndx
- !14905 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- !14918 [OLK-5.10] backport important bugfix from the kernel-5.10.y
- module: fix [e_shstrndx].sh_size=0 OOB access
- !2893 igc: add default intel igc driver module support
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- x86: KVM: Advertise CPUIDs for new instructions in Clearwater Forest
- x86/cpu: Add model number for Intel Clearwater Forest processor
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- igc:add default intel igc driver support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
</package>
<package pkgid="f18b2f92b0312908e68e0945675069aa73cdd731f4a28a9ddb218dce2a503350" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="266.0.0.169.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-257.0.0.160" date="1742990400">- !15643 drivers:misc:sdma-dae: sync code to openEuler
- drivers:misc:sdma-dae: remove unnecessary return in void function
- drivers:misc:sdma-dae fix incorrect resource release
- drivers:misc:sdma-dae remove lock while pausing channels
- drivers:misc:sdma-dae add mmu_notifier
- drivers:misc:sdma-dae: add MODULE_VERSION to control version</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
</package>
<package pkgid="f6a7b3fbec2c57733555855898a87843bd7604d0ee7af2ffb9c016a14f8b6054" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="267.0.0.170.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-258.0.0.161" date="1743508800">- !15699  Push 2 self-developed patches to OLK-5.10
- !15671  ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- !15669  arm64: mm: add mc support for __buffer_migrate_page
- !15630  Fix CVE-2022-49553
- !15627  fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- printk: Skip log flush in NMI context when logbuf_lock is held
- x86: reboot: Initialize the printk locks to avoid deadlock
- !15675  arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- !15646  nilfs2: do not force clear folio if buffer is referenced
- !15676  sched/fair: Optimize the dynamic smt
- !15330 [OLK-5.10]:update patches for sw64 architecture
- sched/fair: Optimize the dynamic smt
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
- arm64: mm: add mc support for __buffer_migrate_page
- !15595  io_uring: prevent opcode speculation
- nilfs2: do not force clear folio if buffer is referenced
- fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()
- fs/ntfs3: validate BOOT sectors_per_clusters
- fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
- io_uring: prevent opcode speculation
- sw64: distribute intx interrupts by hose
- sw64: kvm: use generic kvm mmu memory caches
- sw64: fix msi interrupt for guest os
- sw64: acpi: remove constraint that cid of boot core must be zero
- sw64: pci: get register base address from firmware
- sw64: fix compile warning of do_entUna()
- sw64: fix save_ktp compatibility for C3
- sw64: fix PTBR save/restore for hibernation
- sw64: kvm: remove some unused codes
- sw64: add syscall pfh_ops
- sw64: fix broken rdfpcr()
- sw64: force kernel stack to be 16 bytes aligned
- sw64: match platform device by acpi method
- sw64: iommu: support acpi init
- sw64: spi: update spi controller driver
- sw64: irqchip: fix compatibility with old dts
- sw64: kvm: fix pmd_trans_cont
- sw64: add -fno-sw-unalign-byte to cflags for C4
- sw64: define cpu_relax() as imb()
- sw64: kvm: fix size of struct kvm_regs for C3B
- sw64: fix the .endm in hibernate_asm.S
- sw64: fix compile error of efi.systab
- sw64: pci: adjust the maximum number of RC per node
- sw64: get mclk and external clk from firmware
- sw64: fix compile error of MMSIZE
- sw64: acpi: disable ACPI for xuelang
- sw64: ahci: disable parallel bus scan
- sw64: redesign run mode setup method
- sw64: rename static key and related simd libraries
- sw64: fix secondary cpu bring up bug
- sw64: acpi: fix coding style and typos
- sw64: irq: fix compilation error
- sw64: improve the verification logic of DTB
- sw64: kvm: add the member of the vcpucb structure
- sw64: kvm: fix the check for THP
- sw64: kvm: fix page walk error of unmap_apt_range()
- sw64: apply new boot params from DTB chosen node
- sw64: receive new boot params from firmware
- sw64: setup stackframe at kernel entry point
- sw64: save and restore CSR_WR_FREGS for SIMD libs
- sw64: rename copy and set lib functions
- sw64: rename copy and set lib files
- sw64: choose lib at compile time
- sw64: perf: add core4 pmu support
- sw64: redesign struct kvm_regs for C4
- sw64: store topology and numa info by each cpu itself
- sw64: kvm: fix live migration bug
- sw64: kvm: fix APT fault handler
- sw64: work around suspend for C4
- sw64: employ trick on regs.pc for specific exception
- sw64: enable CONFIG_FRAME_POINTER by default for junzhang
- sw64: fix syscall_fallback() for vdso gettimeofday
- sw64: dts: add Junzhang
- sw64: lpc: work around hardware flaws
- sw64: improve cpu bring up method
- sw64: introduce new entry framework for C4
- sw64: irq: update the initial value of nr_irqs
- sw64: msi: fix sw64_set_affinity function in msi-v2
- sw64: dynamically switch between lib implementation
- sw64: kvm: fix unmap_apt_{ptes, pmds}
- sw64: msi: remove redundant interrupt enables
- sw64: add unaligned access support for C4 new instructions
- sw64: fix compilation warning
- sw64: fix kconfig selections
- sw64: iommu: adjust iova range
- sw64: iommu: introduce generic DMA ops to iommu_v2
- sw64: iommu: fix iommu_v2 compile problems
- sw64: acpi: fix missed upper bits of rcid for junzhang
- sw64: pci: remove duplicate pcie operations
- sw64: irq: remove unnecessary initialization
- sw64: acpi: enable generic GSI
- sw64: irqchip: support ACPI-based interrupt controller initialization
- sw64: acpi: support MADT entry print for SW PINTC, MSIC and LPC-INTC
- sw64: acpi: add ACPI-style structures for SW PINTC, MSIC and LPC-INTC
- sw64: mm: fix PTE bits check
- sw64: use a new wrap_asid hmcall when asid wraps
- sw64: rewrite fpcr and swcr conversion
- sw64: enable hardware denorm by default
- sw64: add four-socket system support
- sw64: add a new kernel parameter to override mclk
- sw64: improve sw64_printk()
- sw64: msi: fix bugs in multi-msi interrupts allocation and release
- sw64: pci: change pci transaction ordering rule settings
- sw64: irqchip: fix virtual PINTC not working properly
- sw64: dts: improve properties for PINTC
- sw64: dts: improve properties for LPC-INTC
- sw64: dts: fix interrupt related properties for GPIO
- sw64: dts: add chosen node
- sw64: dts: fix properties for spi controller device node
- sw64: fix coding style and typos
- sw64: acpi: fix function acpi_numa_processor_affinity_init()
- sw64: fix rd_f compatibility issue for C4
- sw64: export mclk for guest os
- sw64: refactor device interrupt domain
- sw64: kvm: fix clock sync of CORE4 live migration
- sw64: kvm: delete memory hotplug codes for CORE3B
- sw64: add missing c4 legacy power management code
- sw64: add missing c4 intc kconfig
- sw64: fix macro definition compilation error
- i2c: designware: Do not complete i2c read without RX_FULL interrupt
- sw64: add macros for mother board config info
- sw64: kvm: scale up the range of target vcpu parsed by hypervisor
- sw64: pci: reset dma mask for devices on zx200
- sw64: kvm: fix return value of vmem_mmap
- sw64: msi: make vector_irq_t and sw64_msi_chip_data cache line aligned
- sw64: iommu: add default DMA ops for passthrough domains
- sw64: iommu: recognize potential multiple aliases for devices
- sw64: iommu: fix group allocation semantics
- sw64: iommu: rename sunway iommu filenames
- sw64: iommu: remove unnecessary locking for sunway iommu driver
- sw64: fix dtb address validity check
- sw64: iommu: use a generic implementation of DMA ops
- sw64: pci: fix compile error when CONFIG_ACPI=n
- sw64: smp: suppress function setup_smp() when ACPI enabled
- sw64: acpi: parse SW CINTC for SMP initialization
- sw64: acpi: support MADT entry print for SW CINTC
- sw64: acpi: add ACPI-style structures for SW CINTC
- sw64: smp: add new structure to record rcid information
- sw64: smp: modify function smp_rcb_init() to receive base address
- sw64: pci: synchronize the OEM table ID of MCFG with BIOS
- sw64: kvm: add trace kvm function
- sw64: iommu: fix the bug when vfio_iommu unpin pages
- sw64: use rvpcr() to setup run mode
- sw64: kgdb: add single-step debug support
- sw64: fix lockdep error
- sw64: perf: do all event checks in sw64_pmu_event_init()
- sw64: numa: fix compile error when CONFIG_ACPI_NUMA=n
- sw64: pci: export some pci functions
- sw64: uapi: fix a compile error for headers_install
- sw64: perf: hide hardware performance events in guest os
- sw64: fix hugepage support
- sw64: extern vdso_start and vdso_end as char[]
- sw64: remove useless current_policy
- sw64: make sure _PAGE_LEAF is zero for swap pte
- sw64: get cpufreq_policy with standard interface
- sw64: mm: fix function numa_clear_node()
- sw64: acpi: enable upgrade acpi tables via initrd
- sw64: acpi: suppress the function cpu_set_node() when CONFIG_ACPI_NUMA=y
- sw64: acpi: fix the function for parsing CPU affinity
- sw64: acpi: use common functions about parsing SRAT and SLIT
- sw64: acpi: enable CONFIG_ACPI_NUMA
- sw64: move function setup_smp() before NUMA initialization
- sw64: acpi: move ACPI initialization before NUMA initialization
- sw64: pci: adjust the directory structure of PCI-related source files
- sw64: pci: move some common functions from kernel/pci.c to pci/pci.c
- sw64: pci: support ACPI-based PCI initialization
- sw64: iommu: apply subsys_initcall_sync for function sunway_iommu_init()
- sw64: iommu: register iommu_cpu_syscore_ops in function sunway_iommu_init()
- sw64: pci: use pci_bus_to_pci_controller to get pci_controller
- sw64: pci: add quirks for ACPI-based ECAM</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
</package>
<package pkgid="0fc6ae0cce5a95aac73a120e5a7e158a0af304cc596b8e8b1852c67bbcd1f244" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="268.0.0.171.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-259.0.0.162" date="1744113600">- !15773  drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15794  Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15802  hrtimers: Handle CPU state correctly on hotplug
- hrtimers: Handle CPU state correctly on hotplug
- !15679  list: fix a data-race around ep-&gt;rdllist
- !15683  CVE-2025-21726
- !15682  padata: fix UAF in padata_reorder
- !15728  *** CVE-2025-21823 ***
- !15782 sdma-dae: modify ttl_processes reduce logic
- Revert "arm64: mm: add mc support for __buffer_migrate_page"
- !15409  CVE-2025-21715
- sdma-dae: modify ttl_processes reduce logic
- !15760  uprobes: Reject the shared zeropage in uprobe_write_opcode()
- !15766  bpf, sockmap: Fix race between element replace and close()
- !15765  CVE-2024-56642
- drm/drm_vma_manager: Add drm_vma_node_allow_once()
- !15769  gpio: aggregator: protect driver attr handlers against module unload
- !15753  x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- gpio: aggregator: protect driver attr handlers against module unload
- bpf, sockmap: Fix race between element replace and close()
- tipc: fix NULL deref in cleanup_bearer()
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
- !15365 mm/init: Add quirk for phytium ps23064 SoC
- !15690  net: rose: fix timer races against user threads
- !15716  CVE-2022-49513
- !15733  tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- tracing: Fix use-after-free in print_graph_function_flags during tracer switching
- !15449  vrf: use RCU protection in l3mdev_l3_out()
- batman-adv: Drop unmanaged ELP metric worker
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: fix panic during interface removal
- batman-adv: Drop initialization of flexible ethtool_link_ksettings
- batman-adv: Add new include for min/max helpers
- !15701  usb: gadget: f_tcm: Don't free command immediately
- !15510 v3  CVE-2025-21816
- !15480  PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- mm/init: Add quirk for phytium ps23064 SoC
- cpufreq: governor: Use kobject release() method to free dbs_data
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- usb: gadget: f_tcm: Don't free command immediately
- net: rose: fix timer races against user threads
- padata: avoid UAF for reorder_work
- padata: add pd get/put refcnt helper
- padata: fix UAF in padata_reorder
- list: fix a data-race around ep-&gt;rdllist
- hrtimer: Fix kabi broken of struct hrtimer_cpu_base
- hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
- hrtimer: Report offline hrtimer enqueue
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
- vrf: use RCU protection in l3mdev_l3_out()
- net: davicom: fix UAF in dm9000_drv_remove</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
</package>
<package pkgid="28aa4ca5224662d2c66e555c6cf94e87365f7eb7e38d3ebeb34a3afca6c0c18f" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="269.0.0.172.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-260.0.0.163" date="1744718400">- !15841  HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- !15837  CVE-2025-21858
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- geneve: Fix use-after-free in geneve_find_dev().
- !15828  mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15717  media: uvcvideo: Fix double free in error path
- !15759  Fix kmemleak false positive
- mt76: fix use-after-free by removing a non-RCU wcid pointer
- !15378  ASoC: atmel: Fix error handling in snd_proto_probe
- !15696  fs/dcache: fix bad unlock balance in shrink_dentry_list()
- !15816 perf: Configure BRBE correctly on VHE host
- perf: Configure BRBE correctly on VHE host
- efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init()
- media: uvcvideo: Fix double free in error path
- fs/dcache: fix bad unlock balance in shrink_dentry_list()
- ASoC: atmel: Fix error handling in snd_proto_probe</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
</package>
<package pkgid="823139ced9e2e07c51c24d8d33628745586e8055a88aee3791bad3f4505a2fa6" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="270.0.0.173.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-261.0.0.164" date="1745323200">- !15959  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15956  drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15791  CVE-2025-21877
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- !15894  ftrace: Avoid potential division by zero in function_stat_show()
- !15892  bnxt: Do not read past the end of test names
- !15840  block: fix bugs in blk_register_queue()
- !15867  soc: hisilicon: Serialize the online and onfline the acpi devices
- !15883 v2  iommu/arm-smmu-v3: Fix the extra atc tlb flush
- !15811  rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- !15756  powerpc: Fix save r13 on kprobe/ftrace entry
- ftrace: Avoid potential division by zero in function_stat_show()
- bnxt: Do not read past the end of test names
- iommu/arm-smmu-v3: Fix the extra atc tlb flush
- soc: hisilicon: Serialize the online and onfline the acpi devices
- block: fix lock ordering in blk_register_queue() error path
- block: fix resource leak in elevator registration error path
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- usbnet: gl620a: fix endpoint checking in genelink_bind()
- powerpc: Fix save r13 on kprobe/ftrace entry</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-262.0.0.165" date="1746532800">- !16057 mailbox: pcc: Always clear the platform ack interrupt first
- !16076  mpage: fix softlockup in mpage_readahead()
- !15888 [OLK-5.10] backport important bugfix for nvme driver from the kernel-5.10.y
- !16128  openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- !16127  net: Fix CVE-2025-21763
- !16125  ndisc: extend RCU protection in ndisc_send_skb()
- !16129  arp: use RCU protection in arp_xmit()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- neighbour: use RCU protection in __neigh_notify()
- neighbour: delete redundant judgment statements
- ndisc: extend RCU protection in ndisc_send_skb()
- !16088  CVE-2024-58094
- jfs: add check read-only before truncation in jfs_truncate_nolock()
- mpage: fix softlockup in mpage_readahead()
- !16063  ndisc: Fix CVE-2025-21764
- ndisc: use RCU protection in ndisc_alloc_skb()
- net: add dev_net_rcu() helper
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
- mailbox: pcc: Always clear the platform ack interrupt first
- soc: hisilicon: kunpeng_hccs: Fix incorrect string assembly
- !15776 [OLK-5.10] new bugfix from mainline for Turin
- !15941  block: fix UAF in blk_mq_has_sqsched()
- !15939  md/raid1: fix memory leak in raid1_run() if no active rdev
- !15938  md: bypass block throttle for superblock update
- !15940  md/raid1: fix bitmap update when all write requests fail
- !15220 [OLK-5.10] Ethernet: Supports Linkdata ethernet Controllers
- !15990  Backport the perf fix patch
- perf: Really fix event_function_call() locking
- perf: Fix event_function_call() locking
- perf/core: Fix missing wakeup when waiting for context reference
- perf/core: Fix perf_cgroup_switch()
- block: Decode all flag names in the debugfs output
- blk-mq: avoid to touch q-&gt;elevator without any protection
- blk-mq: protect q-&gt;elevator by -&gt;sysfs_lock in blk_mq_elv_switch_none
- block: remove QUEUE_FLAG_DEAD
- md/raid1: fix bitmap update when all write requests fail
- md/raid1: fix memory leak in raid1_run() if no active rdev
- md: bypass block throttle for superblock update
- nvme-pci: fix multiple races in nvme_setup_io_queues
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- x86/CPU/AMD: Do the common init on future Zens too
- Ethernet: Linkdata: Supports Linkdata ethernet Controllers</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
</package>
<package pkgid="49eb955778b287d3a58006329564aa5023c7fd4d111b728556c4b0e89bc224a8" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="272.0.0.175.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-263.0.0.166" date="1747137600">- !16242  fuse: support fastpath
- !16225  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- fuse: support fastpath via fast_ipc
- fuse: add fast path for fuse_range_is_writeback
- fuse: fix matching of FUSE_DEV_IOC_CLONE command
- fuse: 32-bit user space ioctl compat for fuse device
- ipc: add fast_ipc module to enable fast process switching
- !16036  proc: fix UAF in proc_get_inode()
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- !16164  fix CVE-2023-53093
- !16184  net/hinic3: Synchronize new NIC features and bug fixes
- net/hinic3: Synchronize new NIC features and bug fixes
- tracing/histograms: Allow variables to have some modifiers
- tracing: Do not let histogram values have some modifiers
- proc: fix UAF in proc_get_inode()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
</package>
<package pkgid="10dbad8ac67f7bb7d94dcaf53a3ad891ebc8b717a6a5fcd34e1b509b72e0e4a9" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="273.0.0.176.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-264.0.0.167" date="1747828800">- !16356  bugfixes for fuse fastpath and fast_ipc
- !16327  mfd: ene-kb3930: Fix a potential NULL pointer dereference
- ipc: fix error kill signal handle in fast_ipc
- fuse: add fuse fastpath forget cmd support
- !16316  bpf: Fix kmemleak warning for percpu hashmap
- !16343  ext4: fix OOB read when checking dotdot dir
- !16048 [OLK-5.10] iommu/vt-d: Set No Execute Enable bit in PASID table entry
- !16206  ext4: update s_journal_inum if it changes after journal replay
- !16220  jbd2: remove wrong sb-&gt;s_sequence check
- !15899  Backport mainline patches to avoid crash caused by rsize being 0
- !16215 uffd: Fix bug of cannot set mode in userfaultfd_copy
- !15498  cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- !15709 [OLK-5.10]:update patches for sw64 architecture
- !16309  ocfs2: validate l_tree_depth to avoid out-of-bounds access
- ext4: fix OOB read when checking dotdot dir
- !16322  bpf: Fix WARN() in get_bpf_raw_tp_regs
- !16204  ext4: fix off-by-one error in do_split
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- bpf: Fix WARN() in get_bpf_raw_tp_regs
- bpf: Fix kmemleak warning for percpu hashmap
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
- !8014 [22.03-LTS-SP3]Solve the problem that a virtual machine cannot identify the GPU by passthrough
- uffd: Fix bug of cannot set mode in userfaultfd_copy
- !16274  kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- !15296 [Intel-SIG]dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- !13916 intel: backport intel_pstate driver update from 6.11
- kvm: x86: fix infinite loop in kvm_guest_time_update when tsc is 0
- jbd2: remove wrong sb-&gt;s_sequence check
- ext4: update s_journal_inum if it changes after journal replay
- ext4: fix off-by-one error in do_split
- cpufreq: intel_pstate: Support highest performance change interrupt
- x86/cpufeatures: Add HWP highest perf change feature flag
- iommu/vt-d: Set No Execute Enable bit in PASID table entry
- smb: client: Update IO sizes after reconnection
- smb: client: Store original IO parameters and prevent zero IO sizes
- smb:client: smb: client: Add reverse mapping from tcon to superblocks
- sw64: provide arch_test_bit_acquire() for architecture sw64
- sw64: ftrace: implement ftrace_modify_call
- sw64: cpu: give preference to CPU information from SMBIOS
- sw64: irqchip: use sunway as vendor prefix in device tree
- sw64: irqchip: use pr_fmt instead of prefix string macro
- sw64: numa: decrease CONFIG_NODES_SHIFT to 3
- perf jitdump: Add SW64 support
- sw64: emulator: add shutdown and restart functions
- sw64: emulator: fix the multi-core boot issue
- sw64: fix bad address error for vfio
- sw64: kvm: convert to the gfn-based MMU notifier callbacks
- sw64: add SO_NETNS_COOKIE definition
- sw64: locking: Move qrwlock.h include after qspinlock.h
- sw64: fix no CONFIG_DYNAMIC_FTRACE_WITH_REGS error
- sw64: fix kprobe function
- sw64: perf: fix specific performance events can be sampled
- sw64: bpf: optimize JIT for load imm
- sw64: bpf: fix BPF_CALL JIT for multi-function programs
- libbpf: add sw64 support
- sw64: implementing VDSO with generic code
- sw64: rename mmap protection_map
- sw64: ptrace: add NT_SW64_SYSTEM_CALL regset
- sw64: ensure sw64 handle PF_IO_WORKER in copy_thread()
- sw64 bpf: Add missing uapi header for BPF_PROG_TYPE_PERF_EVENT programs
- sw64 bpf: add BPF_NOSPEC jit
- sw64: rename _PFN_BITS to __PFN_BITS
- sw64: bpf: optimize some instructions
- sw64: bpf: fix XADD32 and XADD64
- sw64: irqchip: fix irq_enable/disable callback for MCU controller
- sw64: update defconfig
- sw64: kvm: remove unused argument 'addr' of apt_dissolve_pud/pmd()
- sw64: cache: fix shared_cpu_map when PPTT is valid
- sw64: kvm: fix tlb flush implementation of dirty page tracking
- sw64: kvm: declare KVM_CAP_SET_GUEST_DEBUG
- sw64: pci: remove function fix_jm585_reset()
- sw64: irqchip: remove fallback after kzalloc_node()
- sw64: irqchip: improve intx implementation
- sw64: kvm: add KVM_CAP_READONLY_MEM support
- sw64: pci: fix incorrect pointer of struct pci_controller
- sw64: fix mmap protection_map
- sw64: show CPU feature UNA in /proc/cpuinfo
- sw64: fix the error of cpufreq update
- sw64: mm: support fdt memory reservation
- sw64: remove deprecated annotation in irq.h
- sw64: introduce a fine-grained intx mask/unmask system
- sw64: move handle_intx() into pci-intx handle
- sw64: perf: fix system hang problem when using perf callchain sampling
- sw64: fix compilation issues on match.c
- sw64: iommu: fix NULL hose check
- sw64: mm: fix PFN of PMDs for 512M hugepage
- sw64: kvm: fix an error when unmapping 512M hugepages
- sw64: modify sys_pfh_ops
- sw64: pci: fix legacy PCI not initialized for XueLang platform
- sw64: fix set_huge_pte_at for C4
- sw64: fix compilation issues
- sw64: add arch_hugetlb_valid_size for C4
- sw64: pci: remove legacy io reservation
- sw64: cache: give preference to cache information from PPTT table
- sw64: cpu: refactor cpuinfo related code
- sw64: cache: refactor cacheinfo related code
- sw64: cpu: move cpu related code to the newly created cpu.c
- sw64: topology: support initializing topology via DT or ACPI
- sw64: defconfig: fix SPI related configuration items
- sw64: irqchip: add version 3 for PINTC
- sw64: fix null pointer issue when CONFIG_BUILTIN_DTB=y
- sw64: acpi: suppress log of function acpi_numa_x2apic_affinity_init()
- sw64: clk: further fix the clock frequency of SPI and I2C
- sw64: smp: fix function fdt_setup_smp()
- Revert "sw64: fdt: map physical node ID to logical node ID"
- sw64: kvm: adjust interrupt priority for guest
- sw64: fix judgements about legacy pci support
- sw64: compatible with suspend implementation
- sw64: add junzhang_v1/2/3_key
- sw64: fix LPC legacy IO space on chip junzhang and junzhang_v2
- sw64: fix numa setup when acpi is disabled
- sw64: fix setup_mem_size()
- sw64: mm: remove legacy memory detection for JunZhang platform
- sw64: fix the register bug in do_entUna
- sw64: iommu: improve iommu initialization
- sw64: add unaligned access handling code for SIMD in kernel mode (5.10)
- sw64: select different MUX to read cpu frequency
- sw64: clk: fix the clock frequency of SPI and I2C
- sw64: fix a bug in huge_pte_offset()
- sw64: pci: rename some functions
- sw64: pci: support PCIe controller driver based on device tree
- PCI: Allow architecture-specific pci_remap_iospace()
- sw64: remove sw64_io related functions
- sw64: platform: add misc platform driver
- sw64: perf: remove redundant link options
- sw64: lpc: fix ast2400 driver error for C4
- sw64: improve lib performance for new archs
- sw64: remove unnecessary parameter passing
- sw64: kvm: fix invalid memslot flags checking during dirty logging
- sw64: kvm: don't retrieve memory slot again in page fault handler
- sw64: pci: fix the policy of pci resource assignment
- sw64: kexec: remove code for compatibility with builtin DTB
- sw64: smp: allow NR_CPUS less than the number detected by firmware
- sw64: dtb: fix DTB not reserved when CONFIG_EFI=n for xuelang
- sw64: fix C4 INTx configuration
- sw64: pci: fix compile error when CONFIG_PCI_MSI=n
- sw64: add basic frequency scaling support for JunZhang
- sw64: add __vdso_getcpu support
- sw64: pci: fix unable to get node ID when numa_off is set
- sw64: kexec: fix kernel crashdump bugs
- sw64: bpf: fix BPF_CALL address
- sw64: fix irq work
- sw64: pciehp: get enabled/disabled status of RCs from firmware
- sw64: reset the CSR:PTBR_USR
- sw64: dts: support online-capable property for cpu device node
- sw64: fix a base address of msiaddr register
- sw64: fix some S3 CSRs problems for C4
- sw64: bypass sunway pcie hotplug driver in non-physical scenario
- sw64: seperate IRQ_MSI configs for sub-architectures
- sw64: handle null MSI irq in guest os
- sw64: handle null MSI irq
- sw64: kvm: fix mmio GPA for C4
- sw64: iommu: fix wrong devfn setup
- sw64: iommu: fix some iova related checks
- sw64: defconfig: update defconfig for kata-containers
- sw64: add HARDLOCKUP_DETECTOR support
- sw64: add dependency for sunway-ged driver
- sw64: fix compile error with CONFIG_SUNWAY_GED=m
- sw64: remove unused sunway_memory_get_meminfo()
- sw64: Kconfig: activate ARCH_KEEP_MEMBLOCK
- sw64: fix bugs in decreasing frequency
- sw64: add cpu hotplug support for C4 guest
- sw64: add NMI support
- sw64: add CSR_CAUSE into pt_regs
- sw64: optimize the code in do_entInt()
- sw64: kvm: support up to 256 vCPUs for C4
- sw64: fdt: map physical node ID to logical node ID
- sw64: perf: hide hardware performance events in guest os for c4
- sw64: kvm: fix inconsistent vcpucb of C4
- sw64: kvm: implement kvm_arch_set_irq_inatomic()
- sw64: fix regs.pc on single-step with ptrace
- sw64: modify some interrupt target core to logic 0 core
- sw64: fix guest send ipi target
- sw64: fix sw64_is_fake_mcount() of recordmcount
- sw64: remove some unused module init/exit/license
- sw64: kvm: add numa support for memory hotplug
- sw64: numa: support NUMA initialization based on device tree
- sw64: smp: support SMP initialization based on device tree
- sw64: dtb: disable built-in DTB for junzhang
- sw64: ata: add ata_hrst_delay cmdline option
- sw64: kvm: fix bug when vcpu disable irq
- sw64: kconfig: add I2C and SPI defconfig for junzhang
- sw64: kconfig: set default y for GPIO if ACPI enabled
- sw64: spi: fix compatibility with dts for xuelang
- sw64: pci: use readq/writeq to read/write RC and PIU IO registers
- sw64: msi: modify msi migration strategy
- sw64: gpu: memset_io and memcpy_toio/fromio for iomem on AMD swsmu
- sw64: pciehp: add pcie hotplug driver support for C4
- sw64: remove redundant intx code
- sw64: irq: support interrupt for virtual GPIO
- sw64: acpi: enable ACPI by default
- sw64: mm: fix mem=start@size invalid in some cases
- sw64: use generic page_is_ram()
- sw64: mm: take memory information from firmware
- sw64: kvm: acpi: match sunway_ged by acpi method
- sw64: lpc: fix compile error with CONFIG_SUNWAY_SUPERIO_AST2400=y
- sw64: fix typo in gpio-sunway
- sw64: fix compile warning of handle_pci_msi_interrupt
- sw64: fix usage of __add_memory() in sunway-ged driver
- sw64: change FORCE_MAX_ZONEORDER default value
- sw64: perf: fix event check order
- sw64: wrap frequency workaround into standalone functions
- sw64: remove redudant save_ktp
- sw64: fix compile warning of smp_callin()
- cifs: Fix an infinite loop in cifsd caused by a failed mount attempt on port 139
- cpufreq: intel_pstate: Simplify spinlock locking
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup()
- cpufreq: intel_pstate: remove cpudata::prev_cummulative_iowait
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode
- cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: set stale CPU frequency to minimum
- cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes
- cpufreq: intel_pstate: ITMT support for overclocked system
- cpufreq: intel_pstate: Fix active mode offline/online EPP handling
- cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable
- cpufreq: intel_pstate: Fix unchecked MSR 0x773 access
- cpufreq: intel_pstate: Process HWP Guaranteed change notification
- cpufreq: intel_pstate: Simplify intel_pstate_update_perf_limits()
- cpufreq: intel_pstate: Clean up frequency computations
- cpufreq: intel_pstate: Always read hwp_cap_cached with READ_ONCE()
- dmaengine: idxd: Add a new DSA device ID for Granite Rapids-D platform
- config: Enable the VGA and IGD features of vfio</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
</package>
<package pkgid="f279cf030d2823dceb6bf4115b8a5b193cda7fd4a4b0e2c49cee488b75fce303" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="274.0.0.177.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-265.0.0.168" date="1748347200">- !16446 Intel: Intel_idle add GNRD and CWF platform support for 5.10
- !16357 [OLK-5.10]:update patches for sw64 architecture
- !16258 修复CVE-2022-3238
- !16403 wifi: ath11k: fix RCU stall while reaping monitor destination ring
- !16439 drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16397 CVE-2025-37925
- !16292 Fix CVE-2025-37773
- !16318 Fix CVE-2025-37782
- !16442 v4  io_uring patches backport
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- !16305 [OLK-5.10] scsi: libsas: Abort all in-flight requests when device is gone
- intel_idle: add Clearwater Forest SoC support
- intel_idle: add Granite Rapids Xeon D support
- io_uring/io-wq: do not use bogus hash value
- io_uring/sqpoll: fix sqpoll error handling races
- io_uring: protect register tracing
- io_uring/sqpoll: close race on waiting for sqring entries
- io_uring: check for iowq alloc_workqueue failure
- io_uring: use private workqueue for exit work
- io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval
- io_uring: kiocb_done() should *not* trust -&gt;ki_pos if -&gt;{read,write}_iter() failed
- io-wq: fully initialize wqe before calling cpuhp_state_add_instance_nocalls()
- io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
- io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
- drivers:misc:sdma-dae: sdma fix PUAF problem fork risk
- !16424  CVE-2024-57876
- drm/dp_mst: fix kabi broken in struct drm_dp_mst_topology_mgr
- drm/dp_mst: Fix resetting msg rx state after topology removal
- sw64: gpu: replace __sw_64__ with CONFIG_SW64
- sw64: kprobe on ftrace: fix bug in restoring regs
- sw64: ioremap: map some IO space with ioremap
- sw64: ioremap: fix an overflow in pci_remap_cfgspace
- sw64: ioremap: support generic ioremap for C4
- sw64: qspinlock: add CNA support for sw64
- sw64: qspinlock: add PARAVIRT SPINLOCK support for sw64
- sw64: move syscall handling to sys_sw64.c
- sw64: improve sw64_rrk
- sw64: fix printing issue when using kprobe on ftrace
- sw64: add powercap driver
- sw64: clocksource: fix the issue of clockevents not being notified
- sw64: fix shared_cpu_map of L3 Cache
- sw64: iommu: work around iova range check after resv_region
- sw64: fix some compile issues for cpuautoplug.c
- sw64: cpufreq: fix for emulator that do not support cpufreq
- sw64: cpufreq: refactor cpufreq related code
- sw64: cpufreq: remove some meaningless code
- sw64: cpufreq: move cpufreq notifier to its user
- sw64: cpufreq: rename sw64_cpufreq.c to sunway-cpufreq.c
- sw64: cpufreq: remove debugfs code
- sw64: msi: fix guest msi interrupt handling
- sw64: msi: clear the residual vector_irq information of cpu
- sw64: ftrace: add notrace attribute to memset&amp;memcpy
- sw64: ftrace: fix bug in restoring regs
- sw64: fix an error in BPF exception handling
- sw64: fix cpu_autoplug error
- sw64: msi: fix irq affinity setting during migration
- sw64: use CONFIG_HZ_PERIODIC by default
- sw64: fix specific performance counter error
- sw64: enable all HW PMUs for max sampling period events
- sw64: update exclusive counter handling
- sw64: fix perf event L1I cache write support
- sw64: kexec: add support for crashkernel=size[KMG]
- sw64: bpf: add ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE to Kconfig
- sw64: ftrace: save&amp;restore more stack frame in ftrace_caller
- sw64: fix secondary_cpu_start for CORE3B
- sw64: fix inslb compiling error
- sw64: vdso: add support for time namespaces
- sw64: fix SWVM_IRQS undeclared when enabling HIBERNATION
- sw64: kvm: optimize the compatibility of guest interrupt
- sw64: kvm: optimize the implementation of guest interrupt
- sw64: sound: fix compile error when CONFIG_SND_DUMMY=y
- sw64: ftrace: fix atomicity bugs in ftrace
- sw64: fix nmi_[enter/exit] error in CORE3B
- sw64: kvm: modify parameters of the exception functions
- sw64: reimplement cmpxchg and xchg
- sw64: enable -fsw-unalign-byte for new subarchs
- sw64: reduce jump instructions in entUna
- sw64: simplify GP handling for entUna
- sw64: iommu: print more info for interrupts
- sw64: add a 1ms delay before CPU offline
- sw64: modify the interface for firmware to pass the running mode
- sw64: change condition of some cflags
- sw64: put cpu_set_node() in init text
- sw64: make sw64_(read/write)_csr always inline
- sw64: compile divide.S for c3b only
- sw64: topology: discard topology information from PPTT
- sw64/kvm: fix a bug for starting CORE3 VM
- sw64: iommu: implement resv_region APIs
- sw64: rename PT_REGS_SP to PT_REGS_R30
- sw64: modify parameters of the exception functions
- sw64: modify CPU autoplug initialization process
- sw64: pci: fix secondary bus reset issue
- sw64/vdso: support mremap() for vDSO
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
- jfs: reject on-disk inodes of an unsupported type
- !16360 [OLK-5.10] Fix sxe compile errors without CONFIG_PM_SLEEP
- sw64: sound: avoid pagefault in pcm driver's memset
- sw64: flush TLB after modifying ptbr_sys
- sw64: fix an error when running no main() program
- !16373 [OLK-5.10]:sw64: perf: fix compilation error with undeclared EM_SW_64
- !16370  ftrace: Add cond_resched() to ftrace_graph_set_hash()
- sw64: perf: fix compilation error with undeclared EM_SW_64
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- !16345 [OLK-5.10]scsi: hisi_sas: Fixed failure to issue vendor specific commands
- fs/ntfs3: Fix double free on remount
- Linkdata：net：fix sxe compile errors 'sxe_resume' defined but not used
- scsi: hisi_sas: Fixed failure to issue vendor specific commands
- scsi: libsas: Abort all in-flight requests when device is gone
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- virtiofs: add filesystem context source name check</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
</package>
<package pkgid="7dcfb3d7baf7da02624cd08553fe38c4689c808e4f59c87ca84879afeca57d7f" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="275.0.0.178.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-266.0.0.169" date="1748952000">- !16219  cachefiles: Fix non-taking of sb_writers around set/removexattr
- !16444 powercap: intel_rapl_tpmi: backport 2 rapl tpmi update and fix from upstream6.12
- !16535  CVE-2022-49647
- !14483 [OLK-5.10]Arm64:KVM: Auto get the virtual_dev irq bypass's devid
- !16533  memcg: always call cond_resched() after fn()
- !16452  xfs: read only mounts with fsopen mount API are busted
- cgroup: fix kabi for css_set
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- memcg: always call cond_resched() after fn()
- !16493 drivers:misc:sdma-dae: fix incorrect kmalloc flag
- !16498  padata: do not leak refcount in reorder_work
- !16299  sched/fair: Fix the bug in dynamic smt when getting physical core load
- !16502  sched/dynamic_affinity: fix preffered_cpu offline problem
- !16457  fs/jfs: Prevent integer overflow in AG size calculation
- sched/dynamic_affinity: fix preffered_cpu offline problem
- irqchip/gic-v3-its: Init reserved rsv_devid_pools use pci bus info
- padata: do not leak refcount in reorder_work
- drivers:misc:sdma-dae: fix incorrect kmalloc flag
- fs/jfs: Prevent integer overflow in AG size calculation
- xfs: read only mounts with fsopen mount API are busted
- powercap: intel_rapl_tpmi: Ignore minor version change
- powercap: intel_rapl_tpmi: Fix bogus register reading
- sched/fair: Fix the bug in dynamic smt when getting physical core load
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- irqchip/gic-v3-its: Move build_devid_pools from its to acpi iort init
- irqchip/gic-v3-its: Add ACPI_IORT as VIRT_PLAT_DEV's dependency
- acpi/iort: Add func to get used deviceid bitmap</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
</package>
<package pkgid="fac159cf0fb14a799e420ea9f55d12f8d1c75b625e227b0f80b10ff2f6002f2c" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="276.0.0.179.oe2203sp4"/>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-267.0.0.170" date="1749556800">- !16640  IMA: use real_inode to get the i_version
- !16558 [OLK-5.10] PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16555 [OLK-5.10] PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- !16197 mm:fix return handling of cow_user_page
- !16618  SELinux: Add check for the user data passed to kcalloc in hashtab_init
- IMA: use real_inode to get the i_version
- mm:fix return handling of cow_user_page
- !16584  tracing: Fix oob write in trace_seq_to_buffer()
- !16625  Backport SMC-D feature
- net: Fix kabi broken
- net/smc: enable the smc-lo on the x86 and arm64 platforms
- net/smc: use the correct ndev to find pnetid by pnetid table
- s390/ism: add release function for struct device
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- net/smc: delete pointless divide by one
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- net/smc: protect link down work from execute after lgr freed
- net/smc: fix LGR and link use-after-free issue
- net/smc: Fix lookup of netdev by using ib_device_get_netdev()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net/smc: Fix memory leak when using percpu refs
- net/smc: Address spelling errors
- net/smc: Use static_assert() to check struct sizes
- net/smc: add the max value of fallback reason count
- net/smc: remove unused input parameters in smcr_new_buf_create
- net/smc: remove redundant code in smc_connect_check_aclc
- net/smc: remove the fallback in __smc_connect
- net/smc: remove unreferenced header in smc_loopback.h file
- net/smc: avoid overwriting when adjusting sock bufsizes
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
- Revert "net/smc: Tune the maximum size of virtually contiguous sndbufs or RMBs for SMC-R"
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net/smc: implement DMB-merged operations of loopback-ism
- net/smc: adapt cursor update when sndbuf and peer DMB are merged
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: register loopback-ism into SMC-D device list
- net/smc: ignore loopback-ism when dumping SMC-D devices
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: implement DMB-related operations of loopback-ism
- net/smc: implement ID-related operations of loopback-ism
- net/smc: introduce loopback-ism for SMC intra-OS shortcut
- net/smc: decouple ism_client from SMC-D DMB registration
- net/smc: Avoid -Wflex-array-member-not-at-end warnings
- net/smc: make smc_hash_sk/smc_unhash_sk static
- net: smc: fix spurious error message from __sock_release()
- net/smc: change the term virtual ISM to Emulated-ISM
- net/smc: fix incorrect SMC-D link group matching logic
- net/smc: manage system EID in SMC stack instead of ISM driver
- net/smc: disable SEID on non-s390 archs where virtual ISM may be used
- net/smc: support extended GID in SMC-D lgr netlink attribute
- net/smc: compatible with 128-bits extended GID of virtual ISM device
- net/smc: define a reserved CHID range for virtual ISM devices
- net/smc: introduce virtual ISM device support feature
- net/smc: support SMCv2.x supplemental features negotiation
- net/smc: unify the structs of accept or confirm message for v1 and v2
- net/smc: introduce sub-functions for smc_clc_send_confirm_accept()
- net/smc: rename some 'fce' to 'fce_v2x' for clarity
- net/smc: fix missing byte order conversion in CLC handshake
- net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty
- s390/ism: ism driver implies smc protocol
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: return the right falback reason when prefix checks fail
- net/smc: fix smc clc failed issue when netdevice not in init_net
- net/smc: Fix dependency of SMC on ISM
- net/smc: Extend SMCR v2 linkgroup netlink attribute
- net/smc: support max links per lgr negotiation in clc handshake
- net/smc: support max connections per lgr negotiation
- net/smc: support smc v2.x features validate
- net/smc: add vendor unique experimental options area in clc handshake
- net/smc: support smc release version negotiation in clc handshake
- net/smc: Remove unused function declarations
- s390/ism: Do not unregister clients with registered DMBs
- s390/ism: Fix and simplify add()/remove() callback handling
- s390/ism: Fix locking for forwarding of IRQs and events to clients
- smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES
- s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
- net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK
- net/smc: Scan from current RMB list when no position specified
- net/smc: Reset connection when trying to use SMCRv2 fails.
- smc: Fix use-after-free in tcp_write_timer_handler().
- net/smc: Use percpu ref for wr tx reference
- net/smc: Introduce explicit check for v2 support
- net/smc: Fix device de-init sequence
- net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()
- net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs()
- net/smc: De-tangle ism and smc device initialization
- s390/ism: Consolidate SMC-D-related code
- net/smc: Separate SMC-D and ISM APIs
- net/smc: Register SMC-D as ISM client
- net/ism: Add new API for client registration
- s390/ism: Introduce struct ism_dmb
- net/smc: Terminate connections prior to device removal
- net/smc: Fix an error code in smc_lgr_create()
- net/smc: Support SO_REUSEPORT
- net/smc: Pass on DMBE bit mask in IRQ handler
- s390/ism: Cleanups
- net/smc: Eliminate struct smc_ism_position
- net/smc: set ini-&gt;smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
- net/smc: Fix af_ops of child socket pointing to released memory
- net/smc: use memcpy instead of snprintf to avoid out of bounds read
- net/smc: Fix cleanup when register ULP fails
- net/smc: return ETIMEDOUT when smc_connect_clc() timeout
- net/smc: Limit backlog connections
- net/smc: Remove unused function declaration
- net/smc: Resolve the race between SMC-R link access and clear
- net/smc: Resolve the race between link group access and termination
- net/smc: Reset conn-&gt;lgr when link group registration fails
- net/smc: add comments for smc_link_{usable|sendable}
- net/smc: remove redundant re-assignment of pointer link
- net/smc: Introduce TCP ULP support
- net/smc: Print net namespace in log
- net/smc: Introduce net namespace support for linkgroup
- net/smc: Use the bitmap API when applicable
- net/smc: Clean up local struct sock variables
- net: make sock_inuse_add() available
- net: inline sock_prot_inuse_add()
- net/smc: stop links when their GID is removed
- net/smc: add netlink support for SMC-Rv2
- net/smc: extend LLC layer for SMC-Rv2
- net/smc: add v2 support to the work request layer
- net/smc: retrieve v2 gid from IB device
- net/smc: add v2 format of CLC decline message
- net/smc: add listen processing for SMC-Rv2
- net/smc: add SMC-Rv2 connection establishment
- net/smc: prepare for SMC-Rv2 connection
- net/smc: save stack space and allocate smc_init_info
- net/smc: add generic netlink support for system EID
- net/smc: keep static copy of system EID
- net/smc: add support for user defined EIDs
- net/smc: no need to flush smcd_dev's event_wq before destroying it
- net/smc: avoid possible duplicate dmb unregistration
- net/smc: Remove redundant assignment to rc
- net: smc: Remove repeated struct declaration
- net/smc: Use active link of the connection
- net/smc: use helper smc_conn_abort() in listen processing
- net: smc: convert tasklets to use new tasklet_setup() API
- net/smc: improve return codes for SMC-Dv2
- Revert "anolis: net/smc: Resolve the race between link group access and termination"
- Revert "anolis: net/smc: Resolve the race between SMC-R link access and clear"
- Revert "anolis: net/smc: delay RDMA resource release until connecitons freed"
- Revert "net/smc: Rename 'llc_conf_mutex' variable to 'llc_conf_lock' in struct smc_link_group"
- Revert "net/smc: Add size match for smc_buf_get_slot"
- Partially revert 'net/smc: Clear memory when release and reuse buffer'
- !16581  module: ensure that kobject_put() is safe for module type kobjects
- SELinux: Add check for the user data passed to kcalloc in hashtab_init
- !16566 [OLK-5.10]:update patches for sw64 architecture
- !16468 [OLK-5.10] iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- !16561 platform/x86/intel-uncore-freq: Add efficiency latency control and other fix for 5.10
- !16552  media: venus: hfi_parser: refactor hfi packet parsing logic
- !16340 drivers: update Yunsilicon drivers to version 2412GA
- !16551  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- !16575  cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- PCI: Supplement ACS quirk for more Zhaoxin Root Ports
- PCI/P2PDMA: Add Zhaoxin Zhaoxin bridges to the whitelist
- !16589  ipc: fix to protect IPCS lookups using RCU
- !16572  sched: Support NUMA parallel scheduling for multiple processes
- ipc: fix to protect IPCS lookups using RCU
- tracing: Fix compilation warning on arm32
- tracing: Fix oob write in trace_seq_to_buffer()
- module: ensure that kobject_put() is safe for module type kobjects
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- sched: Support NUMA parallel scheduling for multiple processes
- !16553  net/oenetcls: introduce oenetcls for network optimization
- !16568  vp_vdpa: fix the crash in hot unplug with vp_vdpa
- vp_vdpa: fix the crash in hot unplug with vp_vdpa
- sw64: sort arch/sw64/Kconfig
- sw64: disable EFFICIENT_UNALIGNED_ACCESS for C3B
- sw64: optimize unaligned access
- sw64: termios: implement BOTHER, IBSHIFT and termios2
- sw64: ftrace: No need to save original function's temporary registers
- sw64: mm: adjust userspace memory layout
- sw64: cpufreq: fix the frequency returned by cpufreq_driver-&gt;get()
- sw64: remove redundant qspinlock.h from Kbuild
- net/oenetcls: introduce oenetcls for network optimization
- media: venus: hfi_parser: refactor hfi packet parsing logic
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface
- platform/x86/intel-uncore-freq: Add support for efficiency latency control
- platform/x86/intel-uncore-freq: Do not present separate package-die domain
- platform/x86/intel-uncore-freq: Use generic helpers for current frequency
- platform/x86/intel-uncore-freq: Rename the sysfs helper macro names
- platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API
- platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq
- platform/x86/intel-uncore-freq: Get rid of magic min_max argument
- platform/x86/intel-uncore-freq: Get rid of magic values
- platform/x86/intel-uncore-freq: Re-arrange bit masks
- iommu: Fix RMRR and ACPI direct mappings by using pci_dev instead of pn_dev
- drivers: update Yunsilicon drivers to version 2412GA</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-268.0.0.171" date="1750161600">- !16710 v10  arm64: Support xcall prefetch
- !16615  pci:vga fix race condition in vga_arb_write
- !16715 [OLK-5.10] Add HGSC_CERT_IMPORT ioctl interface for Hygon CPUs.
- !16713  usb: cdc-acm: Check control transfer buffer size before access
- crypto: ccp: Implement CSV_HGSC_CERT_IMPORT ioctl command
- usb: cdc-acm: Check control transfer buffer size before access
- !16664  Fix watchdog false positive problem
- config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default
- xcall: Add tracepoints for different prefetching stages
- eventpoll: Add /proc/xcall/cpu_list for performance tuning
- eventpoll: Add /proc/xcall/prefetch dir for performance tuning
- eventpoll: Support xcall async prefetch
- arm64: Introduce xcall prefetch enable interface
- arm64: Reserve a kabi in task_struct exclusively for xcall
- arm64: Refactor the xcall proc code
- arm64: revert kpti bypass
- arm64: Add debugfs dir for xint
- arm64: Introduce Xint software solution
- arm64: Faster SVC exception handler with xcall
- arm64: Introduce xcall a faster svc exception handling
- !16676  KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- !16687 drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- !16677  mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- !16693  arm64: uaccess: avoid blocking within critical sections
- arm64: uaccess: avoid blocking within critical sections
- !16539  scsi: target: Fix WRITE_SAME No Data Buffer crash
- !16681  CVE-2023-53039
- drivers:misc:sdma-dae: sdma fix uncorrect sleep time
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function
- devm-helpers: Add resource managed version of work init
- workqueue: Add resource managed version of delayed work init
- !15244 Add support for Hygon family 18h model 8h
- !16647 iommu: smmuv3: Not print information of SMMU 0x10 event
- !16659 【OLK-5.10】Support PSPCCP/NTBCCP identification for Hygon 2th、C86-3G and C86-4G
- mm: slub: add __GFP_NOWARN when allocations with GFP_NOWAIT
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- watchdog: fix the SOFTLOCKUP_DETECTOR=n case
- watchdog: fix watchdog may detect false positive of softlockup
- crypto: ccp: Add support to detect CCP devices on Hygon 4th CPUs
- crypto: ccp: Add support to detect CCP devices on Hygon 2nd and 3rd CPUs
- crypto: ccp: Don't check tee support on Hygon platform
- crypto: ccp: Introduce hygon specific interface to support driver
- iommu: smmuv3: Not print information of SMMU 0x10 event
- pci:vga fix race condition in vga_arb_write
- scsi: target: Fix WRITE_SAME No Data Buffer crash
- EDAC/amd64: Add support for Hygon family 18h model 8h
- x86/amd_nb: Add support for Hygon family 18h model 8h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-269.0.0.172" date="1750766400">- !16578  ext4: ignore xattrs past end
- !11993 [22.03-LTS-SP3] bcache: call force_wake_up_gc() if necessary in check_should_bypass()
- !11994 [OLK-5.10] bcache: allow allocator to invalidate bucket in gc
- !16749  arm64: xcall: Fix GPR touch as the original step
- !16774  bpf: Fix prog_array_map_poke_run map poke update
- !16406 locking/qspinlock: Micro-optimize pending state waiting for unlock
- bpf: Fix prog_array_map_poke_run map poke update
- !16768  RDMA/hns: Get messgae length of ack_req from FW
- RDMA/hns: Get messgae length of ack_req from FW
- !16750 v2  add-exec-ebpf-v3
- !16758  objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- !16706  OLK-5.10 Bperf
- !16735 [OLK-5.10]:update patches for sw64 architecture
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- sched/ebpf: Add helper to set prefer cpumask for the task
- sched/ebpf: Add bpf_sched_cfs_exec_set_cpumask hook
- arm64: xcall: Fix GPR touch as the original step
- sw64: irqchip: update effective affinity for PINTC
- sw64: irqchip: add support for PINTC on all NUMA nodes
- sw64: ioremap: fix IO interfaces
- sw64: cpufreq: optimize the granularity of cpufreq
- sw64: ftrace: remove temporary registers left in context saving
- sw64: kvm: fix undefined compile issues for kvm module
- sw64: pintc: fix guest pintc init
- sw64: set module region to the 2GB space below vmalloc area
- Fix type mismatch between struct perf_cpu and integer operations
- perf test shell stat_bpf_counters: Fix test on Intel
- perf stat: Fix error check for bpf_program__attach
- perf stat: Fix error return code in bperf__load()
- perf build: Properly guard libbpf includes
- perf stat: Separate bperf from bpf_profiler
- perf docs: Document bpf event modifier
- perf stat: Fix handling of unsupported cgroup events when using BPF counters
- bpf: Add rcu_read_lock in bpf_get_current_[ancestor_]cgroup_id() helpers
- perf test: Use sqrtloop workload to test bperf event
- perf test stat_bpf_counter.sh: Stabilize the test results
- perf test bpf-counters: Add test for BPF event modifier
- perf test: Add a shell test for 'perf stat --bpf-counters' new option
- perf stat: Fix incorrect display of bperf when event count is 0
- perf stat: Increase perf_attr_map entries
- perf stat: Support inherit events during fork() for bperf
- perf stat: Fix BPF program section name
- perf bpf_skel: Do not use typedef to avoid error on old clang
- perf bpf: Fix building perf with BUILD_BPF_SKEL=1 by default in more distros
- perf stat: Enable BPF counter with --for-each-cgroup
- perf bpf_counter: Move common functions to bpf_counter.h
- perf tools: Add cgroup_is_v2() helper
- perf tools: Add read_cgroup_id() function
- perf stat: Introduce bpf_counter_ops-&gt;disable()
- perf stat: Introduce ':b' modifier
- perf stat: Introduce config stat.bpf-counter-events
- perf bpf: check perf_attr_map is compatible with the perf binary
- perf util: Move bpf_perf definitions to a libperf header
- perf stat: Measure 't0' and 'ref_time' after enable_counters()
- perf stat: Introduce 'bperf' to share hardware PMCs with BPF
- perf stat: Enable counting events for BPF programs
- perf build: Support build BPF skeletons with perf
- bpftool: Add Makefile target bootstrap
- perf tools: Add 'cgroup-switches' software event
- perf core: Add PERF_COUNT_SW_CGROUP_SWITCHES event
- perf core: Factor out __perf_sw_event_sched
- bpf: Allow bpf_get_current_ancestor_cgroup_id for tracing
- ext4: ignore xattrs past end
- locking/qspinlock: Micro-optimize pending state waiting for unlock
- bcache: allow allocator to invalidate bucket in gc
- bcache: call force_wake_up_gc() if necessary in check_should_bypass()</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-270.0.0.173" date="1751457600">- !16892 v5  HiSock Redirect Framework
- !16872  nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16887  bpf: fix potential 32-bit overflow when accessing ARRAY map element
- samples/bpf: Add HiSock Redirect sample
- openeuler_defconfig: Enable CONFIG_HISOCK
- bpf: Add bpf_ext_memcpy extension helper for arm64
- arm64: insn: Add some opcodes to instruction decoder
- bpf: Add bpf_change_skb_dev helper
- bpf: Add bpf_set_ingress_dst helper
- bpf: Add hisock_xdp_buff wrapper for xdp_buff
- bpf: Add bpf_get_ingress_dst helper
- bpf: Add HISOCK_EGRESS hook on network egress path
- bpf: Add BPF_PROG_TYPE_HISOCK prog type
- bpf: Add XDP_HISOCK_REDIRECT action
- bpf: Add CONFIG_HISOCK
- bpf: fix potential 32-bit overflow when accessing ARRAY map element
- !16798 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-5.10)
- !16860  arm64: kaslr: fix nokaslr cmdline parsing
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- !16816  CVE-2024-26798
- !15234 Add support edac for hygon family 18h model 10h
- arm64: kaslr: fix nokaslr cmdline parsing
- !16849 v4  Introduce soft domain v4
- sched: Fix might sleep in atomic section issue
- sched: Balance newly task to soft domain
- config: Configurate CONFIG_SCHED_SOFT_DOMAIN
- sched: Add cmdline sched_soft_domain switch for soft domain feature
- sched: fair: Disable numa migrate for soft domian task
- sched: fair: Select idle cpu in soft domain
- sched: Attach task group to soft domain
- sched: topology: Build soft domain for LLC
- !16847  net/oenetcls: Support cluster sched
- !16840  A small fix for ftrace preemption count
- !16841  ftrace: Fix UAF when lookup kallsym after ftrace disabled
- net/oenetcls: Support cluster sched
- !16826  fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !16785  ALSA: pcm: Fix race of buffer access at PCM OSS layer
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr
- !15238 Add LS and IF mce types for Hygon family 18h model 7h
- !15239 Add IOAPIC support for Hygon family 18h model 10h
- !16819  nfsd: don't ignore the return code of svc_proc_register()
- nfsd: don't ignore the return code of svc_proc_register()
- fbcon: always restore the old font data in fbcon_do_set_font()
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed
- fbdev: fbcon: Properly revert changes when vc_resize() failed
- !16786  Fix CVE-2022-50230
- !16801 v4  add soft quota
- sched: Fix kabi broken in struct task_group and struct cfs_rq
- sched: More flexible use of CPU quota when CPU is idle
- !16794  eventpoll: Fix soft lockup in xcall_read()
- crypto: hct: update hct driver to support both guest and host.
- crypto: hct: provides hygon crypto technology ccp device driver.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- eventpoll: Fix soft lockup in xcall_read()
- arm64: set UXN on swapper page tables
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
- iommu/hygon: Add support for Hygon family 18h model 10h IOAPIC
- EDAC/mce_amd: Add LS and IF mce types for Hygon family 18h model 7h
- EDAC/amd64: Get correct memory type for Hygon family 18h model 10h
- EDAC/amd64: Check if umc channel is enabled for Hygon family 18h model 10h
- x86/amd_nb: Add helper function to identify Hygon family 18h model 10h</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-271.0.0.174" date="1751976000">- !17015 [OLK-5.10]:update patches for sw64 architecture
- !16751 [OLK-5.10] iommu: Add support for ACPI device direct mapping
- !12159 Add the spidev.ko to OLK-5.10
- !16992  selinux: ignore unknown extended permissions
- !15235 correct address translation for Hygon family 18h model 4h~10h
- sw64: kvm: save the virtual address of irqs_pending in vcpucb
- sw64: delete useless I/O access in VM and emulator
- sw64: kvm: fix perf kvm support for CORE4
- sw64: pci: remove zx200 dma mask reset
- sw64: fix for executing syscall(-1)
- sw64: acpi: select HAVE_ACPI_APEI when ACPI is set
- sw64: pci: add base address of devmn
- sw64: adjust the notrace in the code
- !16776  cachefiles: Fix the potential ABBA deadlock issue
- selinux: ignore unknown extended permissions
- !16970  Fix CVE-2025-38170
- !16966  net: openvswitch: Fix the dead loop of MPLS parse
- !16965  dma-buf: insert memory barrier before updating num_fences
- arm64/fpsimd: Discard stale CPU state when handling SME traps
- net: openvswitch: Fix the dead loop of MPLS parse
- EDAC/amd64: Get intlv_num_dies from F0x60 for Hygon family 18h model 6h
- dma-buf: insert memory barrier before updating num_fences
- !16937 [OLK-5.10]:sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- !16944 xhci: Limit time spent with xHC interrupts disabled during bus resume
- !15224 Add set_guest_pat_wb parameter to enhance performance for non-passthrough application scenarios
- !16934 [OLK-5.10] PCIe Synchronous OLK-6.6 modified to OLK-6.6
- !16935 [OLK-5.10] Add gpio-hisi softdepend
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- xhci: add helpers for enabling and disabling interrupters
- iommu: Add support for ACPI device direct mapping
- !16909  mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- !16916  Backport mainline patches
- !16914  net: fix slab-use-after-free read in decode_session6
- sw64: perf unwind: Do not put libunwind-sw_64 in FEATURE_TESTS_BASIC
- Add gpio-hisi softdepend
- PCI/DPC: Ignore Surprise Down error on hot removal
- hwtracing: hisi_ptt: Check duplicate filters before allocation
- hwtracing: hisi_ptt: Initialize the filter sysfs attribute when allocation
- EDAC/amd64: Use u16 for some umc variables for Hygon family 18h model 4h
- EDAC/amd64: Fix the calculation of cs id for Hygon family 18h model 4h
- EDAC/amd64: Separate the address translation function for hygon family 18h model 4h
- !16899  libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16901  uprobes: check anon before compound when unregister
- net: virtio: Fix kabi broken
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: add more sanity check in virtio_net_hdr_to_skb()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- net: fix slab-use-after-free read in decode_session6
- !15236 Get the correct instance id calculation for Hygon family 18h model 6h~10h
- !15658 [OLK-5.10] perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- !16795 [OLK-5.10] Print secure features when running on Hygon CPUs
- mm/hugetlb: fix incorrect gfp flag for mempolicy MPOL_PREFERRED_MANY
- uprobes: check anon before compound when unregister
- libnvdimm/labels: Fix divide error in nd_label_data_init()
- !16752  nfs: handle failure of nfs_get_lock_context in unlock path
- x86/cpufeatures: Add CSV3 CPU feature
- x86/cpufeatures: Add CPUID_8C86_0000_EDX CPUID leaf
- x86/cpu: Detect memory encryption features on Hygon CPUs
- KVM: SVM: Print Hygon CSV support info if support is detected
- crypto: ccp: Print Hygon CSV API version when CSV support is detected
- x86/mm: Print CSV info into the kernel log
- x86/config: Set CONFIG_HYGON_CSV by default
- x86/mm: Provide a Kconfig entry to build the HYGON memory encryption support into the kernel
- Documentation/arch/x86: Add HYGON secure virtualization description
- cachefiles: Fix the potential ABBA deadlock issue
- nfs: handle failure of nfs_get_lock_context in unlock path
- KVM: x86/svm: Add hygon_set_guest_pat_wb parameter for non-passthrough application scenarios
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 8h
- EDAC/amd64: Get instance id for Hygon family 18h model 10h
- EDAC/amd64: Calculate instance id for hygon family 18h model 7h
- EDAC/amd64: Fix the calculation of instance id for Hygon family 18h model 6h
- Open the CONFIG for spidev.ko</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-272.0.0.175" date="1752062400">- !17048  RDMA/hns: Stability and Security Fixes and Improvements
- !16839 Add gpio-hisi softdepend
- !16852 net: hns3: fix a use of uninitialized variable problem
- !16918 [OLK-5.10] io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- !17037  iio: light: opt3001: fix deadlock due to concurrent flag access
- !16855 ptp: hisi: the print of element in ptp need protected by lock
- !16881 net: hns3: fix kernel crash when uninstalling driver
- RDMA/hns: Fix double destruction of rsv_qp
- RDMA/hns: Fix address information leakage of DCA memory
- RDMA/hns: Fix scc_param failed logic judgments
- RDMA/hns: Fix congestion control algorithm parameter range
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- RDMA/hns: Use __free_page() to free pages allocated with alloc_page()
- RDMA/hns: Fix divide-by-zero error in dca debugfs
- RDMA/hns: Fix descriptions of stars api
- RDMA/hns: Fix poe memory leak in error flow
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Add check between dca_min_size and dca_max_size
- io_uring: Support forcing sq thread to be idle and woken up by hrtimer
- iio: light: opt3001: fix deadlock due to concurrent flag access
- net: hns3: fix kernel crash when uninstalling driver
- ptp: hisi: the print of element in ptp need protected by lock
- ptp: hisi: fix list not delete problem
- net: hns3: fix a use of uninitialized variable problem
- net: hns3: avoid unnecessary checking when unmap buffer
- net: hns3: disable interrupt when ptp init failed
- Add gpio-hisi softdepend</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-273.0.0.176" date="1752580800">- !17045  arm64: Fix a typo in xcall_init_task()
- !17105  arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17099  arm64: exec: add mcs support for prepare_binprm
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
- !17104  hugetlb: drain pcp for movable zone before alloc
- !16949  media: uvcvideo: Remove dangling pointers
- hugetlb: drain pcp for movable zone before alloc
- arm64: exec: add mcs support for prepare_binprm
- iov_iter: add copy_mc_page_to_kvec_iter
- !16927  nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- !16761  cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect
- !16429 CVE-2025-21855
- !17050 EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- !17058  media: cxusb: no longer judge rbuf when the write fails
- !16943  KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- media: cxusb: no longer judge rbuf when the write fails
- ibmvnic: Don't reference skb after sending to VIOS
- !17002  net_sched: red: fix a race in __red_change()
- EDAC/amd64: Fix the check build warning info in hygon_umc_normaddr_to_sysaddr()
- arm64: Fix a typo in xcall_init_task()
- net_sched: red: fix a race in __red_change()
- media: uvcvideo: Remove dangling pointers
- KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- cifs: fix mount deadlock by avoiding super block iteration in DFS reconnect</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-274.0.0.177" date="1753185600">- !17195  smb: client: fix use-after-free in crypt_message when using async crypto
- !17239 【OLK 5.10】some bugfixes and cleanups for hns3 driver
- !17077  smb: client: fix use-after-free in cifs_oplock_break
- !17242  ima: prevent concurrent list operations in ima_lsm_update_rules
- ima: prevent concurrent list operations in ima_lsm_update_rules
- net: hns3: Change the function return type from int to bool
- !17232 soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- !17233  hugeltb: Fix null ptr exception during drain movable pcp
- soc: hisilicon: kunpeng_hccs: Fix incorrect log information
- net: hns3: defer calling ptp_clock_register()
- net: hns3: fix an interrupt residual problem
- hugeltb: Fix null ptr exception during drain movable pcp
- net: hns3: store rx VLAN tag offload state for VF
- !17204 v2  CVE-2022-49961
- !16809  vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex
- !16885  fs: Backport two namespace fix patches
- !17158  arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- selftests/bpf: Add regression test for pruning fix
- bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
- !17146  jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17173  wifi: ath9k_htc: Abort software beacon handling if disabled
- !16942  ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- smb: client: fix use-after-free in crypt_message when using async crypto
- wifi: ath9k_htc: Abort software beacon handling if disabled
- !17149  Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- arm64/mpam: Only inform the CPUs running tasks of the group
- arm64/mpam: Fix the potential deadlock when updating the rmid
- arm64/mpam: Fix task CLOSID/RMID update race
- arm64/mpam: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- arm64/mpam: Use an IPI instead of task_work_add() to update MPAM sysreg
- !17123  crypto: algif_hash - fix double free in hash_accept
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- !17125  EDAC/skx_common: Fix general protection fault
- !17131  modify xcall xint proc file permissions
- modify xcall proc file permissions to 640
- modify xint proc file permissions to 640
- EDAC/skx_common: Fix general protection fault
- crypto: algif_hash - fix double free in hash_accept
- smb: client: fix use-after-free in cifs_oplock_break
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
- do_change_type(): refuse to operate on unmounted/not ours mounts
- vhost-scsi: protect vq-&gt;log_used with vq-&gt;mutex</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-275.0.0.178" date="1753790400">- !17327  perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- !17252 ROH:fix security issues and eliminate redundancies
- !17241 gpiolib: Get rid of ARCH_NR_GPIOS
- !17010  perf: Fix sample vs do_exit()
- !17256 Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- ROH:fix security issues and eliminate redundancies
- !17311  usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !15469  scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
- !17283  fs/writeback: bail out if there is no more inodes for IO and queued once
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- !17306  atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17297  scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17298  dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- !17300  jfs: add check read-only before txBeginAnon() call
- !16386 v5  Fix x2apic enablement and allow more CPUs, clean up I/OAPIC and MSI bitfields
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
- !17288 RDMA/hns: Support querying DIP SCC context
- jfs: add check read-only before txBeginAnon() call
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts
- !17285  libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- !16746 [OLK-5.10] backport important bugfix for nvme driver from upstream linux-5.10.y
- RDMA/hns: Support querying DIP SCC context
- libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
- fs/writeback: bail out if there is no more inodes for IO and queued once
- !17279 RDMA/hns: Remove MW support
- RDMA/hns: Remove MW support
- RDMA/hns: Drop GFP_NOWARN
- RDMA/hns: Fix -Wframe-larger-than issue
- RDMA/hns: Fix HW resources are not cleared in error flow
- RDMA/hns: Fix remove debugfs after device has been unregistered
- RDMA/hns: Add trace for MR/MTR attribute dumping
- RDMA/hns: Add trace for WQE dumping
- RDMA/hns: Add trace for CMDQ dumping
- RDMA/hns: Add trace for AEQE dumping
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- RDMA/hns: Inappropriate format characters cleanup
- RDMA/hns: Add trace for flush CQE
- !17258  mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- Fixed the wrong debugfs node name in hisi_spi debugfs initialization
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- gpiolib: Get rid of never false gpio_is_valid() calls
- perf: Fix sample vs do_exit()
- nvmet-tcp: don't restore null sk_state_change
- x86/hyperv: Enable 15-bit APIC ID if the hypervisor supports it
- iommu/amd: Keep track of amd_iommu_irq_remap state
- iommu/amd: Stop irq_remapping_select() matching when remapping is disabled
- iommu/hyper-v: Remove I/O-APIC ID check from hyperv_irq_remapping_select()
- x86/ioapic: Correct the PCI/ISA trigger type selection
- x86/ioapic: Use I/O-APIC ID for finding irqdomain, not index
- x86/kvm: Enable 15-bit extension when KVM_FEATURE_MSI_EXT_DEST_ID detected
- iommu/hyper-v: Disable IRQ pseudo-remapping if 15 bit APIC IDs are available
- x86/apic: Support 15 bits of APIC ID in MSI where available
- x86/ioapic: Handle Extended Destination ID field in RTE
- iommu/vt-d: Simplify intel_irq_remapping_select()
- x86: Kill all traces of irq_remapping_get_irq_domain()
- x86/ioapic: Use irq_find_matching_fwspec() to find remapping irqdomain
- x86/hpet: Use irq_find_matching_fwspec() to find remapping irqdomain
- iommu/hyper-v: Implement select() method on remapping irqdomain
- iommu/vt-d: Implement select() method on remapping irqdomain
- iommu/amd: Implement select() method on remapping irqdomain
- x86/apic: Add select() method on vector irqdomain
- genirq/irqdomain: Implement get_name() method on irqchip fwnodes
- x86/ioapic: Generate RTE directly from parent irqchip's MSI message
- x86/ioapic: Cleanup IO/APIC route entry structs
- x86/io_apic: Cleanup trigger/polarity helpers
- x86/msi: Remove msidef.h
- x86/pci/xen: Use msi_msg shadow structs
- x86/kvm: Use msi_msg shadow structs
- PCI: vmd: Use msi_msg shadow structs
- x86/hpet: Move MSI support into hpet.c
- x86/devicetree: Fix the ioapic interrupt type table
- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI</changelog>
  <changelog author="Tengda Wu &lt;wutengda2@huawei.com&gt; - 5.10.0-276.0.0.179" date="1754395200">- !16940 v2  dm: fix unconditional IO throttle caused by REQ_PREFLUSH
- !17315  ovl: fix general protection fault in security_inode_getattr
- !17425  net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- !17424  bcache: fix NULL pointer in cache_set_flush()
- !17433  ACPICA: Refuse to evaluate a method if arguments are missing
- !17417  drm/dp_mst: Fix MST sideband message body length check
- !17418  drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- !17407  usb: net: sierra: check for no status endpoint
- !17429  drm/v3d: Disable interrupts before resetting the GPU
- !17292 [OLK 5.10] AMD Turin and auto IBRS patches backport
- ACPICA: Refuse to evaluate a method if arguments are missing
- drm/v3d: Disable interrupts before resetting the GPU
- !17394  selftests/tracing: Fix false failure of subsystem event test
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
- bcache: fix NULL pointer in cache_set_flush()
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- drm/dp_mst: Fix MST sideband message body length check
- usb: net: sierra: check for no status endpoint
- !17389  CVE-2025-21702
- !17388  ipvlan: ensure network headers are in skb linear part
- !17383  net/sched: act_ct: fix ref leak when switching zones
- !17382  net: annotate races around sk-&gt;sk_bound_dev_if
- !17381  net: sched: Disallow replacing of child qdisc from one parent to another
- !17377  net: sched: fix ets qdisc OOB Indexing
- !17379  bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- selftests/tracing: Fix false failure of subsystem event test
- pfifo_tail_enqueue: Drop new packet when sch-&gt;limit == 0
- net_sched: sch_fifo: implement lockless __fifo_dump()
- ipvlan: ensure network headers are in skb linear part
- net/sched: act_ct: fix ref leak when switching zones
- net: annotate races around sk-&gt;sk_bound_dev_if
- !17359 [OLK 5.10] AMD HSMP driver support patches backport
- net: sched: Disallow replacing of child qdisc from one parent to another
- !17374  RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17365  atm: clip: Fix infinite recursive call of clip_push().
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- net: sched: fix ets qdisc OOB Indexing
- !17347  calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- !17373  drm/amd/display: Add null pointer check for get_first_active_display()
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert
- !17370  ext4: inline: fix len overflow in ext4_prepare_inline_data
- drm/amd/display: Add null pointer check for get_first_active_display()
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- atm: clip: Fix infinite recursive call of clip_push().
- !17350  scsi: lpfc: Use memcpy() for BIOS version
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors
- platform/x86/amd/hsmp: switch to use device_add_groups()
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc()
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh
- platform/x86/amd/hsmp: Add support for ACPI based probing
- platform/x86/amd/hsmp: Restructure sysfs group creation
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs
- platform/x86/amd/hsmp: Create static func to handle platdev
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket
- platform/x86/amd/hsmp: Move hsmp_test to probe
- platform/x86/amd/hsmp: Fix iomem handling
- platform/x86/amd/hsmp: improve the error log
- platform/x86/amd/hsmp: add support for metrics tbl
- platform/x86/amd/hsmp: create plat specific struct
- platform/x86: Move AMD platform drivers to separate directory
- !17344 v2  eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- tools headers x86 cpufeatures: Sync with the kernel sources
- KVM: x86: Fix clang -Wimplicit-fallthrough in do_host_cpuid()
- KVM: x86: work around QEMU issue with synthetic CPUID leaves
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature
- x86/cpu, kvm: Add the Null Selector Clears Base feature
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier()
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers
- x86/mm: Refactor cond_ibpb() to support other use cases
- KVM: x86: Advertise that the SMM_CTL MSR is not supported
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful
- KVM: x86: skip host CPUID call for hypervisor leaves
- KVM: x86: add support for CPUID leaf 0x80000021
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
- x86/asm: Have the __ASM_FORM macros handle commas in arguments
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- scsi: lpfc: Use memcpy() for BIOS version
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- eventpoll: Fix return fixed cpu bug in set_prefetch_numa_cpu()
- ovl: fix general protection fault in security_inode_getattr
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH</changelog>
</package>
<package pkgid="4ed1be9eef4220dc27369e9740c8b96a417df45487fa92fe1861ca4cfc566fc2" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="217.0.0.116.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-207.0.0.107" date="1718193600">- !8599  Bluetooth: hci_core: Fix possible buffer overflow
- !8949  CVE-2022-48652
- !8602  netfilter: nf_tables: set dormant flag on hook register failure
- !8867  ipv6: prevent NULL dereference in ip6_output()
- !8779  smb: client: fix UAF in smb2_reconnect_server()
- !8893 [sync] PR-8531:  gpiolib: cdev: fix uninitialised kfifo
- !8985  cvm_tsi: Fix security issue for Confidential cVM TSI
- !8686  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- !8711  ubifs: Set page uptodate in the correct place
- !8860  blk-iocost: do not WARN if iocg was already offlined
- !8639  s390/qeth: Fix kernel panic after setting hsuid
- !8946  usb: typec: ucsi: Limit read size on v1.2
- !8969  Fix CVE-2024-36949
- cvm_tsi: Fix security issue for Confidential cVM TSI
- !8216  ACPI: video: check for error while searching for backlight device parent
- !8903  ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8584  virtio-blk: fix implicit overflow on virtio_max_dma_size
- !8838  blk-iocost: avoid out of bounds shift
- !8856  PCI/PM: Drain runtime-idle callbacks before driver removal
- amd/amdkfd: sync all devices to wait all processes being evicted
- drm/amdkfd: Rework kfd_locked handling
- !8906  net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- !8910  gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- ice: Fix crash by keep old cfg when update TCs more than queues
- ice: ethtool: Prohibit improper channel config for DCB
- !8879  net: core: reject skb_copy(_expand) for fraglist GSO skbs
- !6695  netfilter: nft_set_pipapo: do not free live element
- usb: typec: ucsi: Limit read size on v1.2
- !8891  net: fix out-of-bounds access in ops_init
- !8871 add sdma-dae for openeuler 22.03 SP4
- !8762  tipc: fix UAF in error path
- !8742  octeontx2-af: avoid off-by-one read from userspace
- !8734  mptcp: ensure snd_nxt is properly initialized on connect
- !8634  batman-adv: Avoid infinite loop trying to resize local TT
- !8736  net: hns3: fix kernel crash when devlink reload during initialization
- !8745  afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- !3547  fs: mitigatin cacheline false sharing in struct file
- !8887  nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- net/mlx5e: Fix use-after-free of encap entry in neigh update handler
- ALSA: scarlett2: Add missing error checks to *_ctl_get()
- !8785  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drivers: misc: sdma-dae: enable sdma_dae for arm64
- drivers: misc: sdma-dae: support page fault preprocess
- gpiolib: cdev: fix uninitialised kfifo
- !8849  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: fix out-of-bounds access in ops_init
- !8666  phonet/pep: fix racy skb_queue_empty() use
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment().
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- drivers: misc: sdma-dae: support interrupt init and handle
- drivers: misc: sdma-dae: support sqe task send and execute
- drivers: misc: sdma-dae: support channel management
- drivers: misc: sdma-dae: support getting streamID
- drivers: misc: sdma-dae: support initializ sdma driver
- ipv6: prevent NULL dereference in ip6_output()
- blk-iocost: do not WARN if iocg was already offlined
- PCI/PM: Drain runtime-idle callbacks before driver removal
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- !8684  tcp: properly terminate timers for kernel sockets
- !8629  erspan: make sure erspan_base_hdr is present in skb-&gt;head
- blk-iocost: avoid out of bounds shift
- !8635  ipv6: Fix potential uninit-value access in __ip6_make_skb()
- !8550  tipc: fix a possible memleak in tipc_buf_append
- !8726  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- !8808 v2  Add support for PCC Operation Region
- !8623  fs/9p: only translate RWX permissions for plain 9P2000
- !8479  scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- arm64: config: Enable ACPI_PCC
- ACPI: PCC: Setup PCC Opregion handler only if platform interrupt is available
- ACPI: PCC: Fix unintentional integer overflow
- ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
- ACPI: PCC: replace wait_for_completion()
- ACPI: PCC: Release resources on address space setup failure path
- ACPI: PCC: pcc_ctx can be static
- ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype
- ACPICA: Add support for PCC Opregion special context data
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- smb: client: fix UAF in smb2_reconnect_server()
- tipc: fix UAF in error path
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
- octeontx2-af: avoid off-by-one read from userspace
- net: hns3: fix kernel crash when devlink reload during initialization
- mptcp: ensure snd_nxt is properly initialized on connect
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- ubifs: Set page uptodate in the correct place
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- tcp: properly terminate timers for kernel sockets
- phonet/pep: fix racy skb_queue_empty() use
- s390/qeth: Fix kernel panic after setting hsuid
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- batman-adv: Avoid infinite loop trying to resize local TT
- erspan: make sure erspan_base_hdr is present in skb-&gt;head
- fs/9p: only translate RWX permissions for plain 9P2000
- netfilter: nf_tables: set dormant flag on hook register failure
- Bluetooth: hci_core: Fix possible buffer overflow
- virtio-blk: fix implicit overflow on virtio_max_dma_size
- tipc: fix a possible memleak in tipc_buf_append
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- ACPI: video: check for error while searching for backlight device parent
- netfilter: nft_set_pipapo: do not free live element
- fs: enable CONFIG_FILE_MITIGATION_FALSE_SHARING by default on arm64
- fs: mitigatin cacheline false sharing in struct file</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
</package>
<package pkgid="d8fb2a85d54502a784d318a48d4680ac1f5b7174bc27fb9fec93ba34ddd6081b" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="218.0.0.117.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-208.0.0.108" date="1718366400">- !9084 v5  xfs: atomic writes for xfs
- block: fix kabi in struct queue_limits
- xfs: make bunmapi observe forcealigin
- xfs: Only free full extents for forcealign
- xfs: Update xfs_is_falloc_aligned() mask for forcealign
- xfs: fix set xflags fail when inode has extent hit
- xfs: support atomic write ioctl
- fs: xfs: Support setting FMODE_CAN_ATOMIC_WRITE
- fs: xfs: Validate atomic writes
- fs: xfs: Support FS_XFLAG_ATOMICWRITES for forcealign
- fs: iomap: Atomic write support
- fs: Add FS_XFLAG_ATOMICWRITES flag
- fs: xfs: iomap: Sub-extent zeroing
- fs: iomap: Sub-extent zeroing
- fs: xfs: Do not free EOF blocks for forcealign
- fs: xfs: Make file data allocations observe the 'forcealign' flag
- fs: xfs: Enable file data forcealign feature
- fs: xfs: Introduce FORCEALIGN inode flag
- nvme: Atomic write support
- block: Add core atomic write support
- fs: Initial atomic write support
- block: get atomic write max sectors
- !9064 drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9067  config: enable CONFIG_BLK_CGROUP_IOCOST by default
- !9063 v3  block: support to dispatch bio asynchronously
- !9066 change sdma-dae default mode to n
- !8827 v2  iomap: fix sub-page not set dirty state
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- !9059 roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- !9055  CVE-2024-36020
- !9015  CVE-2024-36953
- !9014  drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- config: enable CONFIG_BLK_CGROUP_IOCOST by default
- drivers: misc: sdma-dae: not compile sdma-dae by default
- block: fix kabi broken in struct request_queue about CONFIG_BLK_BIO_DISPATCH_ASYNC
- block: support to dispatch bio asynchronously
- !9050  CVE-2024-35796
- roh/hns3: Add ROH client case in hclgevf_init_client_instance.
- i40e: fix vf may be used uninitialized in this function warning
- !9020  wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- net: ll_temac: platform_get_resource replaced by wrong function
- !7205  mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations
- !8908  Refactor hbmdev a bit
- !9001 roh/hns3: Fix IMP reset vlan unusable.
- !8774  CVE-2024-36914
- !9027  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- !8828  drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- !8719  CVE-2024-35887
- !8872  drm/vmwgfx: Fix invalid reads in fence signaled events
- !8882  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- !8921  hugetlbfs: fix hugetlbfs_statfs() locking
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
- drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb
- roh/hns3: Fix IMP reset vlan unusable.
- !8965  cvm: enhance security for cvm host feature
- !8982  fix CVE-2024-36905
- !8996  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- net: relax socket state check at accept time.
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- cvm: enhance security for cvm host feature
- hugetlbfs: fix hugetlbfs_statfs() locking
- arm64: config: Open the hbmdev related config
- soc: hisilicon: Don't poweroff if memblocks don't offlined
- soc: hisilicon: hisi_hbmdev: Notify the device in the ACPI
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- iomap: Ensure sub-page dirty state is set during mmap writes
- Revert "iomap: Don't create iomap_page objects in iomap_page_mkwrite_actor"
- drm/amd/display: Skip on writeback when it's not applicable
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- mm: memcontrol: do not miss MEMCG_MAX events for enforced allocations</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
</package>
<package pkgid="3652c35eb9c1355d5bf3d6ba744e4a9b63654a05c34ebd49d476e36e8c2d933f" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="219.0.0.118.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-209.0.0.109" date="1718798400">- !9092 v2  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9030  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- !9112  Backport some optimizing patches for kunpeng920
- !9099  Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !9166  A Solution to Re-enable hugetlb vmemmap optimize on ARM64
- !9163  genirq: introduce handle_fasteoi_edge_irq flow handler
- ARM: 9278/1: kfence: only handle translation faults
- arm64: mm: HVO: support BBM of vmemmap pgtable safely
- arm64: mm: kfence: only handle translation faults
- mm: HVO: introduce helper function to update and flush pgtable
- genirq: introduce handle_fasteoi_edge_irq for phytium
- genirq: introduce handle_fasteoi_edge_irq flow handler
- !8753  memcg: fix input of try_to_free_mem_cgroup_pages
- !9149 [sync] PR-9054:  soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9125  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !9138 v2  CVE-2024-36971
- !8494  rpmsg: virtio: Free driver_override when rpmsg_remove()
- !9073 v2  Fix UAF problem of hpool
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- !9131  mm: swap: fix race between free_swap_and_cache() and swapoff()
- !9129  ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- !9068  Bluetooth: RFCOMM: Fix not validating setsockopt user input
- !8700  wifi: cfg80211: check A-MSDU format more carefully
- net: fix kabi breakage in struct dst_ops
- net: fix __dst_negative_advice() race
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- !8999  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- !8938  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- arm64: syscall: unmask DAIF for tracing status
- arm64: Snapshot thread flags
- sched: Snapshot thread flags
- entry: Snapshot thread flags
- x86: Snapshot thread flags
- thread_info: Add helpers to snapshot thread flags
- irqchip/gic-v3: Use dsb(ishst) to order writes with ICC_SGI1R_EL1 accesses
- sched/fair: Optimize test_idle_cores() for !SMT
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- !8940  firewire: ohci: mask bus reset interrupts between ISR and bottom half
- !8747  dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- !9074 [sync] PR-8963:  Fix CVE-2024-35915
- !9083  Bluetooth: L2CAP: Fix not validating setsockopt user input
- !9081 v2  arm64: mm: Replace global variable in pbha with static key
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- arm64: mm: Replace global variable in pbha with static key
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_rx_work
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- mm/dynamic_hugetlb: use rcu lock to protect hpool
- mm/dynamic_hugetlb: simplify the refcount code
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- memcg: fix input of try_to_free_mem_cgroup_pages
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- wifi: cfg80211: check A-MSDU format more carefully
- rpmsg: virtio: Free driver_override when rpmsg_remove()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
</package>
<package pkgid="17d15a73823d13df733ba30fbc7b783201229879da807fd78a803d46490341e7" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="220.0.0.119.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-210.0.0.110" date="1718971200">- !9268  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9103  ksmbd: no response from compound read
- !9186  spi: Fix deadlock when adding SPI controllers on SPI buses
- !9283 hns3 udma: support non share jfr mode in UM
- !9277 ima: Fix violation digests extending issue in cvm
- hns3 udma: kernel support non share jfr mode in UM mode
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- !9244 urma: cannot uninstall uburma driver
- !9250  Fix token error issue when concurrent calls
- !9241 v2  Bugfix backport for rcu
- urma: cannot uninstall uburma driver
- Fix token error issue when concurrent calls
- !9180  wifi: wilc1000: fix RCU usage in connect path
- !9212  drm/amd/display: Fix division by zero in setup_dsc_config
- ima: Fix violation digests extending issue in cvm
- !9239  Fix allmodconfig build frame size error
- !9207 v2  sched: smart_grid: fix potential NULL pointer dereference
- srcu: Fix callbacks acceleration mishandling
- entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up
- rcu: Defer RCU kthreads wakeup when CPU is dying
- RDMA/hiroce3: Fix allmodconfig build frame size error
- !7729  loop: use lo-&gt;lo_disk for kobject_uevent
- !9211  memcg: attach memcg async reclaim worker to curcpu
- !9168  UBIFS: fixes a series of issues that caused by power cut
- !9000  media: tc358743: register v4l2 async device only after successful setup
- !9087  fs/9p: fix uninitialized values during inode evict
- drm/amd/display: Fix division by zero in setup_dsc_config
- memcg: attach memcg async reclaim worker to curcpu
- sched: smart_grid: fix potential NULL pointer dereference
- spi: fix kabi breakage in struct spi_controller
- spi: fix use-after-free of the add_lock mutex
- spi: Fix deadlock when adding SPI controllers on SPI buses
- wifi: wilc1000: fix RCU usage in connect path
- ubifs: dbg_orphan_check: Fix missed key type checking
- ubifs: Fix unattached inode when powercut happens in creating
- ubifs: Fix space leak when powercut happens in linking tmpfile
- ubifs: Move ui-&gt;data initialization after initializing security
- ubifs: Fix adding orphan entry twice for the same inode
- ubifs: Remove insert_dead_orphan from replaying orphan process
- ubifs: Don't add xattr inode into orphan area
- ubifs: Fix unattached xattr inode if powercut happens after deleting
- ubifs: Fix some kernel-doc comments
- ubifs: Fix spelling mistakes
- ksmbd: no response from compound read
- fs/9p: fix uninitialized values during inode evict
- media: tc358743: register v4l2 async device only after successful setup
- loop: use lo-&gt;lo_disk for kobject_uevent</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
</package>
<package pkgid="1e860ab19674875f21fe1b925b02aece4d8fe5909c20863deb1b7b60fbffaaca" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="221.0.0.120.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-211.0.0.111" date="1719057600">- !9318  Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"
- Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
</package>
<package pkgid="d8bf7f2a374166ddccf52bbe8434d11279dfca234056d08e5e06ae14bf6f1d83" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="222.0.0.121.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-212.0.0.112" date="1719144000">- !9347  sched: ARM64 enables SIS_PROP and disables SIS_UTIL"
- sched: ARM64 enables SIS_PROP and disables SIS_UTIL"</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
</package>
<package pkgid="0b5355de0e3082076fa97aa141c7a3eb2cb1b17b7b1a5f0e91f5e4c7ed83192a" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="223.0.0.122.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-213.0.0.113" date="1719230400">- !9327  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- !9264  ring-buffer: Fix a race between readers and resize checks
- !9305  CVE-2024-26661 following bugfix
- !9246  ksmbd: no response from compound read
- !9350  tracing: Fix permissions for the buffer_percent file
- tracing: Fix permissions for the buffer_percent file
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- drm/amd/display: Fix &amp;&amp; vs || typos
- drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'
- Revert "drm/amd/display: Fix &amp;&amp; vs || typos"
- ring-buffer: Fix a race between readers and resize checks
- ksmbd: no response from compound read</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
</package>
<package pkgid="778f44caf6c914ebc3508786995d9ad8de71ae3300c0607a232007a6122f8822" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="224.0.0.123.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-214.0.0.114" date="1719316800">- !9391  fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected
- fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
</package>
<package pkgid="9a5380864999417976b7b21adc9b3efa13c97a418f757675561e5d0537b3bc3d" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="225.0.0.124.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-216.0.0.115" date="1719489600">- !9507  Enable SIS_UTIL for arm64 and optimize load_balance
- !9508  Revert "fs: Use CHECK_DATA_CORRUPTION() when
- Revert "fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected"
- config: Disable COBFIG_ARCH_CUSTOM_NUMA_DISTANCE for arm64
- sched/numa: Fix numa imbalance in load_balance()
- Revert "Revert "sched/fair:ARM64 enables SIS_UTIL and disables SIS_PROP""
- Revert "sched: ARM64 enables SIS_PROP and disables SIS_UTIL""
- !9333  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- !8098  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- !5860  ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
- !9421 v3  block: fix WARNING in init_blk_queue_async_dispatch
- block: fix WARNING in init_blk_queue_async_dispatch
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- ksmbd: fix UAF issue in ksmbd_tcp_new_connection()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
</package>
<package pkgid="dd9ec7248b78a615aff70b2e661aa4f82674f3d26619ebcfd757255dfbff7016" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="226.0.0.125.oe2203sp4"/>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-217.0.0.116" date="1720008000">- !9160  xfs: don't use current-&gt;journal_info
- !9429  usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- !9644  fix uaf when proc_cpuset_show
- !9532  CVE-2024-37356
- !9496  netrom: fix possible dead-lock in nr_rt_ioctl()
- cgroup: fix uaf when proc_cpuset_show
- !9514  RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- !9559  CVE-2024-38597
- !9039 [OLK-5.10] drm/phytium: Replace default efi fb0 with dc fb
- !9595  drm/arm/malidp: fix a possible null pointer dereference
- !9593  ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9504  um: Add winch to winch_handlers before registering winch IRQ
- drm/arm/malidp: fix a possible null pointer dereference
- ARM: 9170/1: fix panic when kasan and kprobe are enabled
- !9587  s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- !9569  net: fec: remove .ndo_poll_controller to avoid deadlocks
- !9540  net/mlx5e: Avoid field-overflowing memcpy()
- !9577 v2  btrfs: fix crash on racing fsync and size-extending write into prealloc
- !9563  fs/ntfs3: Check 'folio' pointer for NULL
- !9383  serial: max3100: Update uart_driver_registered on driver removal
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- !8744  ext4 bugfix from mainline
- !9499  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- !9500  netfilter: nf_tables: flush pending destroy work before exit_net release
- !9453  jffs2: prevent xattr node from overflowing the eraseblock
- !9202  dyndbg: fix old BUG_ON in &gt;control parser
- !9193  wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- !9201  ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- !9190  clk: Fix clk_core_get NULL dereference
- !9188  net: phy: fix phy_get_internal_delay accessing an empty array
- !9462 v2  CVE-2024-27032
- !9408  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- !9447  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- !9425  ASoC: SOF: Fix DSP oops stack dump output contents
- !9321  drm/amd/display: Fix potential index out of bounds in color transformation function
- !9297  CVE-2021-47599
- !9401  Fix CVE-2024-31076
- !9434  cvm: delete dead code and resolve macro definition holes
- !9395  CVE-2024-38587
- !9386  vfio/pci: fix potential memory leak in vfio_intx_enable()
- !9199  init/main.c: Fix potential static_command_line memory overflow
- !8683 v4  Fix CVE-2024-35879
- !9339  serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- !9470  net/mlx5: Add a timeout to acquire the command queue semaphore
- !9442  net/mlx5: Discard command completions in internal error
- !9290  net: bridge: xmit: make sure we have at least eth header len bytes
- !9284  of: module: add buffer overflow check in of_modalias()
- !9477  watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- !9544  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- !9483  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- !9558  CVE-2024-39362
- !9456  bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- !9527  media: lgdt3306a: Add a check against null-pointer-def
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- fs/ntfs3: Check 'folio' pointer for NULL
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- i2c: acpi: Unbind mux adapters before delete
- i2c: add fwnode APIs
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- net/mlx5e: Avoid field-overflowing memcpy()
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- params: lift param_set_uint_minmax to common code
- media: lgdt3306a: Add a check against null-pointer-def
- !9511  blk-throttle: check for overflow in calculate_bytes_allowed
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- blk-throttle: check for overflow in calculate_bytes_allowed
- blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice()
- blk-throttle: factor out code to calculate ios/bytes_allowed
- um: Add winch to winch_handlers before registering winch IRQ
- netfilter: nf_tables: flush pending destroy work before exit_net release
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- netrom: fix possible dead-lock in nr_rt_ioctl()
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- net/mlx5: Add a timeout to acquire the command queue semaphore
- f2fs: fix to avoid potential panic during recovery
- f2fs: fix to check return value of f2fs_reserve_new_block()
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- jffs2: prevent xattr node from overflowing the eraseblock
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- net/mlx5: Discard command completions in internal error
- cvm: delete dead code and resolve macro definition holes
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- ASoC: SOF: Fix DSP oops stack dump output contents
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()
- drm/amd/display: Fix potential index out of bounds in color transformation function
- btrfs: remove stale comment about the btrfs_show_devname
- btrfs: update latest_dev when we create a sprout device
- btrfs: use latest_dev in btrfs_show_devname
- btrfs: convert latest_bdev type to btrfs_device and rename
- net: bridge: xmit: make sure we have at least eth header len bytes
- of: module: add buffer overflow check in of_modalias()
- dyndbg: fix old BUG_ON in &gt;control parser
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- init/main.c: Fix potential static_command_line memory overflow
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- clk: Fix clk_core_get NULL dereference
- net: phy: fix phy_get_internal_delay accessing an empty array
- xfs: don't use current-&gt;journal_info
- drm/phytium: Replace default efi fb0 with dc fb
- ext4: fix warning in ext4_dio_write_end_io()
- ext4: properly sync file size update after O_SYNC direct IO
- iomap: update ki_pos a little later in iomap_dio_complete
- driver core: Fix kabi broken
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- driver core: Introduce device_link_wait_removal()</changelog>
  <changelog author="Jialin Zhang &lt;zhangjialin11@huawei.com&gt; - 5.10.0-218.0.0.117" date="1720612800">- !9851  net/sched: act_skbmod: prevent kernel-infoleak
- !9853  nilfs2: fix use-after-free of timer for log writer thread
- !9831  mmc: davinci: Don't strip remove function when driver is builtin
- !8096  Fix CVE-2024-35988
- nilfs2: fix use-after-free of timer for log writer thread
- net/sched: act_skbmod: prevent kernel-infoleak
- mmc: davinci: Don't strip remove function when driver is builtin
- !9643  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- !9820  kdb: Fix buffer overflow during tab-complete
- kdb: Fix buffer overflow during tab-complete
- !9799  null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9783  CVE-2024-38598
- !9772  btrfs: fix use-after-free after failure to create a snapshot
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
- !9792 v3  net: fix one NULL pointer dereference bug in net_rship module
- !9795  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- !9363  fs/ntfs3: Use variable length array instead of fixed size
- !9712  fix CVE-2024-38540
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- net: fix one NULL pointer dereference bug in net_rship module
- md: fix resync softlockup when bitmap size is less than array size
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter"
- !9373  ALSA: core: Fix NULL module pointer assignment at card init
- !9616 v2  wifi: carl9170: add a proper sanity check for endpoints
- !9538  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- !9766  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- !9768  iomap: Don't finish dio under irq when there exists pages
- !9753 v2  arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9731 v2  Backport bpf bugfixes
- btrfs: fix use-after-free after failure to create a snapshot
- iomap: Don't finish dio under irq when there exists pages
- !9719  KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- !9764  wifi: ar5523: enable proper endpoint verification
- !9711  fix CVE-2024-38615
- !9761  CVE-2024-26816
- !9756  net: openvswitch: fix overwriting ct original tuple for ICMPv6
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
- wifi: ar5523: enable proper endpoint verification
- !9716  ax25: Fix reference count leak issues of ax25_dev
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- x86, relocs: Ignore relocations in .notes section
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- arm64: arm_pmuv3: Correctly extract and check the PMUVer
- !9672  ax25: Fix reference count leak issue of net_device
- !9735  net/9p: fix uninit-value in p9_client_rpc()
- !9572  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- !9571  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- net/9p: fix uninit-value in p9_client_rpc()
- bpf: ensure main program has an extable
- bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
- bpf: Fix __reg_bound_offset 64-&gt;32 var_off subreg propagation
- bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID
- bpf: Fix memory leaks in __check_func_call
- !9440  fix CVE-2024-38621
- !9705  net/hinic3: Add pcie device ID adaption for DPU_NIC card
- KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
- ax25: Fix reference count leak issues of ax25_dev
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- cpufreq: exit() callback is optional
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: Split cpufreq_offline()
- cpufreq: Reorganize checks in cpufreq_offline()
- !9701  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- net/hinic3: Add pcie device ID adaption for DPU_NIC card
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- !9640  CVE-2024-38582
- !9662  tls: fix missing memory barrier in tls_init
- !9657 v2  CVE-2024-38586
- !9686  greybus: lights: check return of get_channel_from_mode
- !9675  crypto: bcm - Fix pointer arithmetic
- greybus: lights: check return of get_channel_from_mode
- crypto: bcm - Fix pointer arithmetic
- ax25: Fix reference count leak issue of net_device
- tls: fix missing memory barrier in tls_init
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- r8169: remove nr_frags argument from rtl_tx_slots_avail
- r8169: improve rtl8169_start_xmit
- r8169: improve rtl_tx
- r8169: use READ_ONCE in rtl_tx_slots_avail
- r8169: remove unneeded memory barrier in rtl_tx
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- wifi: carl9170: add a proper sanity check for endpoints
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- media: stk1160: fix bounds checking in stk1160_copy_video()
- ALSA: core: Fix NULL module pointer assignment at card init
- fs/ntfs3: Use variable length array instead of fixed size
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: fix VMALLOC_START definition</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
</package>
<package pkgid="57b69802a7fd75681eb65f05387a376c42d9c6d62fde465e979d2f3b6b0a150c" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="228.0.0.127.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-219.0.0.118" date="1721217600">- !9850  power: supply: bq27xxx-i2c: Do not free non existing IRQ
- !10031  ipv6: prevent possible NULL dereference in rt6_probe()
- !10060  ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9984  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- !9990  netpoll: Fix race condition in netpoll_owner_active
- !10040  lib/generic-radix-tree.c: Don't overflow in peek()
- !9950  f2fs: remove clear SB_INLINECRYPT flag in default_options
- !9968  CVE-2024-40972
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound
- !9926  ocfs2: fix races between hole punching and AIO+DIO
- !9910  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9908  sock_map: avoid race between sock_map_close and sk_psock_put
- !9946  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9936  fix CVE-2024-40934
- !9953  drm/komeda: check for error-valued pointer
- lib/generic-radix-tree.c: Don't overflow in peek()
- ipv6: prevent possible NULL dereference in rt6_probe()
- netpoll: Fix race condition in netpoll_owner_active
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- ext4: do not create EA inode under buffer lock
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- !9871  cifs: Fix deadlock in cifs_writepages during reconnect
- drm/komeda: check for error-valued pointer
- !9897  ionic: fix use after netif_napi_del()
- !9924  drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9905  mptcp: ensure snd_una is properly initialized on connect
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
- !9893  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- ocfs2: fix races between hole punching and AIO+DIO
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- !9884 roh/core: Support macvlan in roh.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- !9827  ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- !9825  smb: client: fix potential deadlock when releasing mids
- !9839  cgroup: Fix AA deadlock caused by cgroup_bpf_release
- !9889  ipv6: sr: fix memleak in seg6_hmac_init_algo
- sock_map: avoid race between sock_map_close and sk_psock_put
- mptcp: ensure snd_una is properly initialized on connect
- ionic: fix use after netif_napi_del()
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- !9368  CVE-2024-27416
- !9879  fs: improve dump_mapping() robustness
- !9872  CVE-2024-38570
- !9881 v2  iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
- fs: improve dump_mapping() robustness
- roh/core: Support macvlan in roh.
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: Rename sd_{ glock =&gt; kill }_wait
- cifs: Fix deadlock in cifs_writepages during reconnect
- !9745  CVE-2024-39469
- !9843  xfs: fix log recovery buffer allocation for the legacy h_size fixup
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- cgroup: Fix AA deadlock caused by cgroup_bpf_release
- ksmbd: fix slab out of bounds write in smb_inherit_dacl()
- smb: client: fix potential deadlock when releasing mids
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- nilfs2: return the mapped address from nilfs_get_page()
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
</package>
<package pkgid="f2393e71bdbb9502cca24f4c28cef84543658ca03560b6460e3be4a219c3924a" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="229.0.0.128.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-220.0.0.119" date="1721822400">- !9035  keys: Fix overwrite of key expiration on instantiation
- !9182  netfilter: nf_tables: restore set elements when delete set fails
- !10184 [RoCE]从社区回合patch到openEuler（OLK-5.10）
- !10303  netfilter: nf_tables: do not compare internal table flags on updates
- !10258  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10280 v2  CVE-2022-48816
- !9780  ksmbd: fix wrong DataOffset validation of create context
- !10278  usb-storage: alauda: Check whether the media is initialized
- netfilter: nf_tables: do not compare internal table flags on updates
- !10262  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- !10290 Backport 5.10.210 LTS patches from upstream
- PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
- net: bcmgenet: Fix EEE implementation
- drm/msm/dsi: Enable runtime PM
- PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
- PM: runtime: add devm_pm_runtime_enable helper
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
- hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
- scripts/decode_stacktrace.sh: optionally use LLVM utilities
- scripts: decode_stacktrace: demangle Rust symbols
- scripts/decode_stacktrace.sh: support old bash version
- scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
- serial: 8250_exar: Set missing rs485_supported flag
- serial: 8250_exar: Fill in rs485_supported
- serial: Add rs485_supported to uart_port
- mips: Fix max_mapnr being uninitialized on early stages
- PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
- bus: moxtet: Add spi device table
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- tracing: Inform kmemleak of saved_cmdlines allocation
- pmdomain: core: Move the unused cleanup to a _sync initcall
- of: property: fix typo in io-channels
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
- nfp: flower: prevent re-adding mac index for bonded port
- nfp: use correct macro for LengthSelect in BAR config
- ALSA: hda/conexant: Add quirk for SWS JS201D
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- serial: max310x: improve crystal stable clock detection
- serial: max310x: set default value when reading clock ready bit
- ring-buffer: Clean ring_buffer_poll_wait() error return
- iio: accel: bma400: Fix a compilation problem
- staging: iio: ad5933: fix type mismatch regression
- tracing: Fix wasted memory in saved_cmdlines logic
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- xen-netback: properly sync TX responses
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- firewire: core: correct documentation of fw_csr_string() kernel API
- lsm: fix the logic in security_inode_getsecctx()
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &amp;fip-&gt;ctlr_lock"
- modpost: trim leading spaces when processing source files list
- usb: f_mass_storage: forbid async queue when shutdown happen
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: ucsi_acpi: Fix command completion handling
- HID: wacom: Do not register input devices until after hid_hw_start
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
- ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
- i40e: Fix waiting for queues of all VSIs to be disabled
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path for statistics
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- spi: ppc4xx: Drop write-only variable
- of: unittest: Fix compile in the non-dynamic case
- btrfs: send: return EOPNOTSUPP on unknown flags
- btrfs: forbid deleting live subvol qgroup
- btrfs: forbid creating subvol qgroups
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
- USB: serial: cp210x: add ID for IMST iM871A-USB
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- net/af_iucv: clean up a try_then_request_module()
- netfilter: nft_ct: reject direction for ct id
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_compat: reject unused compat flag
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- atm: idt77252: fix a memleak in open_card_ubr0
- selftests: net: avoid just another constant wait
- drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: ti: k3-udma: Report short packet errors
- dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
- bonding: remove print in bond_verify_device_path
- HID: apple: Add 2021 magic keyboard FN key mapping
- HID: apple: Add support for the 2021 Magic Keyboard
- net: sysfs: Fix /sys/class/net/&lt;iface&gt; path
- net: ipv4: fix a memleak in ip_setup_cork
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ixgbe: Refactor overtemp event handling
- ixgbe: Refactor returning internal error codes
- ixgbe: Remove non-inclusive language
- scsi: isci: Fix an error code problem in isci_io_request_build()
- drm: using mul_u32_u32() requires linux/math64.h
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- perf: Fix the nr_addr_filters fix
- drm/amdgpu: Release 'adev-&gt;pm.fw' before return in 'amdgpu_device_need_post()'
- drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
- libsubcmd: Fix memory leak in uniq()
- PCI/AER: Decode Requester ID when no error info found
- fs/kernfs/dir: obey S_ISGID
- tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
- usb: hub: Replace hardcoded quirk value with BIT() macro
- PCI: Only override AMD USB controller if required
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- um: net: Fix return type of uml_net_start_xmit()
- um: Don't use vfprintf() for os_info()
- um: Fix naming clash between UML and scheduler
- leds: trigger: panic: Don't register panic notifier if creating the trigger failed
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- drm/amdgpu: Let KFD sync with VM fences
- watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- drm/msm/dpu: Ratelimit framedone timeout msgs
- media: ddbridge: fix an error code problem in ddb_probe
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- PCI: add INTEL_HDA_ARL to pci_ids.h
- media: rockchip: rga: fix swizzling for RGB formats
- media: stk1160: Fixed high volume of stk1160_dbg messages
- drm/mipi-dsi: Fix detach call without attach
- drm/framebuffer: Fix use of uninitialized variable
- drm/drm_file: fix use of uninitialized variable
- f2fs: fix write pointers on zoned device after roll forward
- drm/amd/display: Fix tiled display misalignment
- fast_dput(): handle underflows gracefully
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- ALSA: hda: Refer to correct stream index at loops
- i40e: Fix VF disable behavior to block all traffic
- Bluetooth: L2CAP: Fix possible multiple reject send
- Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- md: Whenassemble the array, consult the superblock of the freshest device
- block: prevent an integer overflow in bvec_try_merge_hw_page
- net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
- ARM: dts: imx23/28: Fix the DMA controller node name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx25: Fix the iim compatible string
- ionic: pass opcode to devcmd_wait
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- scsi: libfc: Don't schedule abort twice
- ARM: dts: imx7s: Fix nand-controller #size-cells
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7d: Fix coresight funnel ports
- scsi: arcmsr: Support new PCI device IDs 1883 and 1886
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- selftests/bpf: satisfy compiler by having explicit return in btf test
- ext4: fix inconsistent between segment fstrim and full fstrim
- ecryptfs: Reject casefold directory inodes
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
- crypto: stm32/crc32 - fix parsing list of devices
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- ACPI: extlog: fix NULL pointer dereference check
- PNP: ACPI: fix fortify warning
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- audit: Send netlink ACK before setting connection in auditd_set
- regulator: core: Only increment use_count when enable_count changes
- debugobjects: Stop accessing objects after releasing hash bucket lock
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: Fix build error due to is_valid_bugaddr()
- drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
- x86/entry/ia32: Ensure s32 is sign extended to s64
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
- arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
- arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
- ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/tidss: Fix atomic_flush check
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- exec: Fix error handling in begin_new_exec()
- rbd: don't move requests to the running list on errors
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: ref-verify: free ref cache before clearing mount opt
- net: fec: fix the unhandled context fault from smmu
- fjes: fix memleaks in fjes_hw_setup
- selftests: netdevsim: fix the udp_tunnel_nic test
- net: mvpp2: clear BM pool before initialization
- netfilter: nf_tables: validate NFPROTO_* family
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- net/mlx5: DR, Use the right GVMI number for drop action
- tcp: Add memory barrier to tcp_push()
- afs: Hide silly-rename files from userspace
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- bnxt_en: Wait for FLR to complete during probe
- mm: vmalloc: introduce array allocation functions
- block: Remove special-casing of compound pages
- nouveau/vmm: don't set addr on the fail path to avoid warning
- rtc: Adjust failure return code for cmos_set_alarm()
- mmc: mmc_spi: remove custom DMA mapped buffers
- mmc: core: Use mrq.sbc in close-ended ffu
- scripts/get_abi: fix source path leak
- lsm: new security_file_ioctl_compat() hook
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- parisc/firmware: Fix F-extend for PDC addresses
- PM: hibernate: Enforce ordering during image compression/decompression
- crypto: api - Disallow identical driver names
- ext4: allow for the last group to be marked as trimmed
- iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
- iio: adc: ad7091r: Enable internal vref if external vref is not supplied
- iio: adc: ad7091r: Allow users to configure device events
- iio: adc: ad7091r: Set alert bit in config register
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: set safe default SPI clock frequency
- units: add the HZ macros
- units: change from 'L' to 'UL'
- PCI: mediatek: Clear interrupt status before dispatching handler
- usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
- usb: cdns3: fix iso transfer error when mult is not zero
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
- usb: cdns3: fix uvc failure work since sg support enabled
- usb: cdns3: Fixes for sparse warnings
- !10246  ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10224  scsi: ufs: Fix a deadlock in the error handler
- SUNRPC: Do not dereference non-socket transports in sysfs
- SUNRPC: lock against -&gt;sock changing during sysfs read
- !10245  Bluetooth: hci_core: Fix leaking sent_cmd skb
- usb-storage: alauda: Check whether the media is initialized
- !10232  fix CVE-2024-41007
- !10202  net: dsa: seville: register the mdiobus under devres
- !10266  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- !9430  CVE-2022-48703
- !10255  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- !10189  fix CVE-2024-40915
- !10187  fix CVE-2021-47205
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- RDMA/hns: Fix insufficient extend DB for VFs.
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Check atomic wr length
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- !10210 hns3 udma: functions related to CQ bank IDs are supported.
- !10194  sched/fair: Take the scheduling domain into account in select_idle_core()
- Bluetooth: hci_core: Fix leaking sent_cmd skb
- !10179 [22.03-LTS-SP3]net:openvswitch: Before calling ovs_vport_send, check the link status of vport-&gt;dev
- !9913  powerpc/pseries: Enforce hcall result buffer validity and size
- !10217  CVE-2024-35931
- !10061 Backport bugfixes for RDMA/hns from mainline linux
- !10046  nfs: Ensure that the NFS client returns a correct writeback error code
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- !10222  bpf: Fix overrunning reservations in ringbuf
- !10203  dma-mapping: benchmark: fix node id validation
- !9817  arm64: mm: Pass pbha-performance-only bit under chosen node
- !10019  drm/exynos/vidi: fix memory leak in .get_modes()
- !10178  ima: Fix use-after-free on a dentry's dname.name
- scsi: ufs: Fix a deadlock in the error handler
- bpf: Fix overrunning reservations in ringbuf
- drm/amdgpu: Fix kabi breakage in struct amdgpu_hive_info
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- drm/amdgpu : Add hive ras recovery check
- hns3 udma: functions related to CQ bank IDs are supported.
- !10135  ALSA: timer: Set lower bound of start tick time
- !10104  ecryptfs: Fix buffer size for tag 66 packet
- dma-mapping: benchmark: fix node id validation
- net: dsa: seville: register the mdiobus under devres
- !10138 [sync] PR-10095:  CVE-2024-40968
- sched/fair: Take the scheduling domain into account in select_idle_core()
- !10107  tracing: Build event generation tests only as modules
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- !10156 v2  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- !9836  fpga: manager: add owner module and take its refcount
- net: openvswitch: fix race on port output
- ima: Fix use-after-free on a dentry's dname.name
- !10165  drop_monitor: replace spin_lock by raw_spin_lock
- !10162  RDMA/mlx5: Add check for srq max_sge attribute
- !10048  tipc: force a dst refcount before doing decryption
- !10022  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- !10150  mips: bmips: BCM6358: make sure CBR is correctly set
- drop_monitor: replace spin_lock by raw_spin_lock
- RDMA/mlx5: Add check for srq max_sge attribute
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- mips: bmips: BCM6358: make sure CBR is correctly set
- MIPS: Octeon: Add PCIe link status check
- !10041  Fix CVE-2024-36939
- !10128  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ALSA: timer: Set lower bound of start tick time
- !10118  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- !10079  drm/amdgpu: fix UBSAN warning in kv_dpm.c
- !10052  vmci: prevent speculation leaks by sanitizing event in event_deliver()
- !10009  xfs: fix mount hung while sb recover fail
- !10088  fix CVE-2024-40995
- !9992  io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- !9901  ipv6: fix possible race in __fib6_drop_pcpu_from()
- !10096 [sync] PR-9741:  scsi: qedf: Ensure the copied buf is NUL terminated
- !9931  nvdimm: Backport some bugfixs
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- tracing: Build event generation tests only as modules
- ecryptfs: Fix buffer size for tag 66 packet
- scsi: qedf: Ensure the copied buf is NUL terminated
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Add mutex_destroy()
- Revert "RDMA/hns: Fix UAF for cq async event"
- Revert "RDMA/hns: Add mutex_destroy()"
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- tipc: force a dst refcount before doing decryption
- nfs: Ensure write and flush consume writeback errors
- NFS: Don't report ENOSPC write errors twice
- NFS: Use of mapping_set_error() results in spurious errors
- nfs: ensure correct writeback errors are returned on close()
- nfs: nfs_file_write() should check for writeback errors
- sunrpc: fix KABI broken in struct rpc_create_args
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- nfs: make the rpc_stat per net namespace
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/exynos/vidi: fix memory leak in .get_modes()
- xfs: fix mount hung while sb recover fail
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n
- nvdimm/pmem: use add_disk() error handling
- powerpc/pseries: Enforce hcall result buffer validity and size
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- fpga: manager: add owner module and take its refcount
- arm64: mm: Pass pbha-performance-only bit under chosen node
- ksmbd: fix wrong DataOffset validation of create context
- thermal: int340x_thermal: Consolidate priv-&gt;data_vault checks
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- netfilter: nf_tables: restore set elements when delete set fails
- keys: Fix overwrite of key expiration on instantiation</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
</package>
<package pkgid="5fb1fbfa24cf15584322a8bb24a36eea2afebfaf48ae1033d13ea18f8f35031d" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="230.0.0.129.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-221.0.0.120" date="1722427200">- !10436  CVE-2024-39476
- !10418  net: move to_gnet_bpf_attach_type() to filter.c
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- !10065  iommu: Return right value in iommu_sva_bind_device()
- net: move to_gnet_bpf_attach_type() to filter.c
- !10334  fix CVE-2024-36479 for olk-5.10
- !10408  iommu/arm-smmu-v3: Fix the compile warning
- !10363  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- !10058  net: mvpp2: clear BM pool before initialization
- !10057  udp: do not accept non-tunnel GSO skbs landing in a tunnel
- iommu/arm-smmu-v3: Fix the compile warning
- !10339  net/sched: initialize noop_qdisc owner
- !10366 v2  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- !10336 v2  mm: numa-affinity: support THP migration
- !10321  media: i2c: et8ek8: Don't strip remove function when driver is builtin
- !10318 【OLK 5.10】net: hns3: add set_loopback interface to realtek phy driver
- !10342  CVE-2024-39471
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
- drm/amdgpu: add error handle to avoid out-of-bounds
- net/sched: initialize noop_qdisc owner
- mm,do_huge_pmd_numa_page: remove unnecessary TLB flushing code
- mm: numa-affinity: delete the duplicate numa_migrate_prep
- mm: numa-affinity: backport some migrate policy from AutoNuma
- mm: numa-affinity: support THP migration
- mm: thp: skip make PMD PROT_NONE if THP migration is not supported
- mm: migrate: check mapcount for THP instead of refcount
- mm: migrate: don't split THP for misplaced NUMA page
- mm/migrate: fix NR_ISOLATED corruption on 64-bit
- mm: migrate: account THP NUMA migration counters correctly
- mm: thp: refactor NUMA fault handling
- mm: memory: make numa_migrate_prep() non-static
- mm: fix KABI broken in struct vm_fault
- mm: memory: add orig_pmd to struct vm_fault
- !10333  BMA: Fix DMA reset problem and change the version
- fpga: bridge: add owner module and take its refcount
- fpga: remove redundant checks for bridge ops
- fpga: bridge: properly initialize bridge device before populating children
- fpga: bridge: Use standard dev_release for class driver
- fpga: bridge: Rename dev to parent for parent device
- BMA/kbox_drv: Change the version number.
- BMA/veth_drv: Change the version number.
- BMA/cdev_drv: Change the version number.
- BMA/edma_drv: Fix DMA reset problem and change the version number.
- !9362  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- net: phy: add set_loopback interface to realtek phy driver
- !10316  sched: Add cfs_preferred_nid_init hook
- !9976  KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- !10073  serial: imx: Introduce timeout when waiting on transmitter empty
- !10172  netrom: Fix a memory leak in nr_heartbeat_expiry()
- sched: Add cfs_preferred_nid_init hook
- !10295 sdma-dae: fix interrupt handle logic
- !10253  fbdev: savage: Handle err return when savagefb_check_var failed
- !10309  net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- !10304 Backport 5.10.211 LTS patches from upstream
- net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr
- block: ataflop: more blk-mq refactoring fixes
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- tls: rx: drop pointless else after goto
- s390: use the correct count for __iowrite64_copy()
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- nouveau: fix function cast warnings
- scsi: jazz_esp: Only build if SCSI core is builtin
- bpf, scripts: Correct GPL license name
- RDMA/srpt: fix function pointer cast warnings
- arm64: dts: rockchip: set num-cs property for spi on px30
- RDMA/bnxt_re: Return error for SRQ resize
- mptcp: fix lockless access in subflow ULP diag
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- usb: roles: fix NULL pointer issue when put module's reference
- usb: cdns3: fix memory double free when handle zero packet
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- x86/alternative: Make custom return thunk unconditional
- Revert "x86/alternative: Make custom return thunk unconditional"
- x86/returnthunk: Allow different return thunks
- x86/ftrace: Use alternative RET encoding
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
- Revert "x86/ftrace: Use alternative RET encoding"
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- s390/cio: fix invalid -EBUSY on ccw_device_start
- erofs: fix lz4 inplace decompression
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- iwlwifi: mvm: write queue_sync_state only for sync
- iwlwifi: mvm: do more useful queue sync accounting
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
- lan743x: fix for potential NULL pointer dereference with bare card
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: tree-checker: check for overlapping extent items
- task_stack, x86/cea: Force-inline stack helpers
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: boards: get codec device with ACPI instead of bus search
- ASoC: Intel: boards: harden codec property handling
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- cifs: add a warning when the in-flight count goes negative
- powerpc/watchpoints: Annotate atomic context in more places
- powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
- block: ataflop: fix breakage introduced at blk-mq refactoring
- seccomp: Invalidate seccomp mode to catch death failures
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- hsr: Avoid double remove of a node.
- hvc/xen: prevent concurrent accesses to the shared ring
- media: av7110: prevent underflow in write_ts_to_decoder()
- ASoC: fsl_micfil: register platform component before registering cpu dai
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- firewire: core: send bus reset promptly on gap count error
- scsi: lpfc: Use unsigned type for num_sge
- hwmon: (coretemp) Enlarge per package core count limit
- efi: Don't add memblocks for soft-reserved memory
- Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
- ext4: correct the hole length returned by ext4_map_blocks()
- nvmet-fc: abort command when there is no binding
- nvmet-fc: release reference on target port
- nvmet-fcloop: swap the list_add_tail arguments
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
- spi: sh-msiof: avoid integer overflow in constants
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- nvmet-tcp: fix nvme tcp ida memory leak
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ahci: asm1166: correct count of reported ports
- wifi: cfg80211: fix missing interfaces when dumping
- dmaengine: fsl-qdma: increase size of 'irq_name'
- dmaengine: shdma: increase size of 'dev_id'
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- zonefs: Improve error handling
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- smb: client: fix parsing of SMB3.1.1 POSIX create context
- smb: client: fix potential OOBs in smb2_parse_contexts()
- net/sched: Retire dsmark qdisc
- net/sched: Retire ATM qdisc
- net/sched: Retire CBQ qdisc
- drivers: misc: sdma-dae: fix interrupt handle logic
- fbdev: savage: Handle err return when savagefb_check_var failed
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- serial: imx: Introduce timeout when waiting on transmitter empty
- iommu: Return right value in iommu_sva_bind_device()
- net: mvpp2: clear BM pool before initialization
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
</package>
<package pkgid="d6a7372a48744a1483e018808338c280dfc7319a00f16572df5ca40d9c070886" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="231.0.0.130.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-222.0.0.121" date="1723032000">- !10787  NFSD: Fix the behavior of READ near OFFSET_MAX
- !10764  CVE-2024-41027
- !10666 v2  ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10624  ata: libata-core: Fix double free on error
- !10652  nvme: avoid double free special payload
- NFSD: Fix the behavior of READ near OFFSET_MAX
- !10785  fix CVE-2024-42155
- s390/pkey: Wipe copies of protected- and secure-keys
- Revert "s390/pkey: Wipe copies of protected- and secure-keys"
- !10742  irqchip/mbigen: Fix mbigen node address layout
- !10737  net/dpaa2: Avoid explicit cpumask var allocation on stack
- Fix userfaultfd_api to return EINVAL as expected
- mm/userfaultfd: fail uffd-wp registration if not supported
- !10743  media: mediatek: vcodec: Only free buffer VA that is not NULL
- !10759  Fix CVE-2024-42160
- !10530  ftruncate: pass a signed offset
- !10679  ibmvnic: Add tx check to prevent skb leak
- !10725  scsi: qedf: Make qedf_execute_tmf() non-preemptible
- f2fs: Add inline to f2fs_build_fault_attr() stub
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- !10582 v2  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- !10489  backport mainline patches
- !10717  CVE-2024-42101
- !10713  CVE-2024-41079
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- irqchip/mbigen: Fix mbigen node address layout
- !10727  net/iucv: Avoid explicit cpumask var allocation on stack
- !10694 v2  drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- !10715  gve: Account for stopped queues when reading NIC stats
- !10691  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- !10621  fix CVE-2024-42129
- !9682  drm: vc4: Fix possible null pointer dereference
- !10427  net: stmmac: move the EST lock to struct stmmac_priv
- net/iucv: Avoid explicit cpumask var allocation on stack
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- !10697  mm: prevent derefencing NULL ptr in pfn_section_valid()
- !10589 v2  ax25: Fix refcount imbalance on inbound connections
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- gve: Account for stopped queues when reading NIC stats
- nvmet: always initialize cqe.result
- !10683  ocfs2: fix DIO failure due to insufficient transaction credits
- !10566  gpio: davinci: Validate the obtained number of IRQs
- !10670  net: can: j1939: Initialize unused data in j1939_send_one()
- !10661  fix CVE-2024-41062
- !10519  xfs: add bounds checking to xlog_recover_process_data
- !10650  xfs: don't walk off the end of a directory data block
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- !10654  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- !10630  sched/deadline: Fix task_struct reference leak
- ocfs2: fix DIO failure due to insufficient transaction credits
- ibmvnic: Add tx check to prevent skb leak
- !10391  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- net: can: j1939: Initialize unused data in j1939_send_one()
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it
- !10642  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10644  inet_diag: Initialize pad field in struct inet_diag_req_v2
- !10636  RDMA/restrack: Fix potential invalid address access
- !10648  net: dsa: mv88e6xxx: Correct check for empty list
- !10598  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- Bluetooth: L2CAP: Fix deadlock
- bluetooth/l2cap: sync sock recv cb and release
- !10503  fix CVE-2024-42155
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- nvme: avoid double free special payload
- xfs: don't walk off the end of a directory data block
- net: dsa: mv88e6xxx: Correct check for empty list
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- !10557  CVE-2024-42105
- RDMA/restrack: Fix potential invalid address access
- sched/deadline: Fix task_struct reference leak
- !10600  ppp: reject claimed-as-LCP but actually malformed packets
- !10612  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10603  IB/core: Implement a limit on UMAD receive List
- ata: libata-core: Fix double free on error
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- locking/mutex: Introduce devm_mutex_init()
- !10554  skmsg: Skip zero length skb in sk_msg_recvmsg
- !10536  CVE-2024-42082
- !10594  fix CVE-2024-41046
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- !10569  ila: block BH in ila_output()
- !10564  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- IB/core: Implement a limit on UMAD receive List
- ppp: reject claimed-as-LCP but actually malformed packets
- !10586  filelock: Fix fcntl/close race recovery compat path
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- !10541  tap: add missing verification for short frame
- !10540  tun: add missing verification for short frame
- !10534  ipv6: prevent possible NULL deref in fib6_nh_init()
- !10544  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- ax25: Fix refcount imbalance on inbound connections
- filelock: Fix fcntl/close race recovery compat path
- !10548  powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- !10527  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10420  stm class: Fix a double free in stm_register_device()
- !10475  ALSA: emux: improve patch ioctl data validation
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- ila: block BH in ila_output()
- gpio: davinci: Validate the obtained number of IRQs
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
- nilfs2: fix inode number range checks
- skmsg: Skip zero length skb in sk_msg_recvmsg
- !10465  null_blk: fix validation of block size
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- tap: add missing verification for short frame
- tun: add missing verification for short frame
- xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
- xdp: Remove WARN() from __xdp_reg_mem_model()
- xdp: Allow registering memory model without rxq reference
- xdp: Move the rxq_info.mem clearing to unreg_mem_model()
- !10476  jffs2: Fix potential illegal address access in jffs2_free_inode
- !10467  io_uring: fix possible deadlock in io_register_iowq_max_workers()
- !10454  fs/ntfs3: Validate ff offset
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ftruncate: pass a signed offset
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- !10383  filelock: fix potential use-after-free in posix_lock_inode
- xfs: add bounds checking to xlog_recover_process_data
- !10460  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- !10493  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- !10417 Backport 5.10.212 LTS patches from upstream
- !10487  fix CVE-2024-42086
- !10384  drm/radeon: fix UBSAN warning in kv_dpm.c
- s390/pkey: Wipe copies of protected- and secure-keys
- !10425  kunit: Fix kthread reference
- !10424  kunit: Fix kthread reference
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- irqdomain: Fixed unbalanced fwnode get and put
- iio: chemical: bme680: Fix overflows in compensate() functions
- !10361  PCI/ROM: Fix PCI ROM header check bug
- mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
- gpio: fix resource unwinding order in error path
- gpiolib: Fix the error path order in gpiochip_add_data_with_key()
- gpio: 74x164: Enable output pins after registers are reset
- ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
- mptcp: fix possible deadlock in subflow diag
- pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
- mmc: sdhci-xenon: fix PHY init clock stability
- mmc: sdhci-xenon: add timeout for PHY init complete
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- wifi: nl80211: reject iftype change with mesh ID change
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- afs: Fix endless loop in directory parsing
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- Bluetooth: Enforce validation on max value of connection interval
- Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
- tun: Fix xdp_rxq_info's queue_index when detaching
- mtd: spinand: gigadevice: Fix the get ecc status issue
- mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
- crypto: virtio/akcipher - Fix stack overflow on memcpy
- platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
- !10458  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- !10404  Fix CVE-2024-41069
- jffs2: Fix potential illegal address access in jffs2_free_inode
- ALSA: emux: improve patch ioctl data validation
- !10352  fix CVE-2024-40976
- !10406  usb: gadget: ncm: Fix handling of zero block length packets
- !10271  HID: core: remove unnecessary WARN_ON() in implement()
- !10431  s390/qeth: fix deadlock during failing recovery
- !10440  net/sched: Fix UAF when resolving a clash
- !10328  net/smc: enable smcrv1 when RNIC supports rocev2
- !10449  net: ena: Add validation for completion descriptors consistency
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- null_blk: fix validation of block size
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- fs/ntfs3: Validate ff offset
- net: ena: Add validation for completion descriptors consistency
- net/sched: Fix UAF when resolving a clash
- s390/qeth: fix deadlock during failing recovery
- net: stmmac: move the EST lock to struct stmmac_priv
- kunit: Fix kthread reference
- kunit: Fix kthread reference
- stm class: Fix a double free in stm_register_device()
- usb: gadget: ncm: Fix handling of zero block length packets
- ASoC: topology: Fix route memory corruption
- ASoC: topology: Fix references to freed memory
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- drm/radeon: fix UBSAN warning in kv_dpm.c
- filelock: fix potential use-after-free in posix_lock_inode
- PCI/ROM: Fix PCI ROM header check bug
- drm/lima: mask irqs in timeout path before hard reset
- drm/lima: add mask irq callback to gp and pp
- net/smc: enable smcrv1 when RNIC supports rocev2
- HID: core: remove unnecessary WARN_ON() in implement()
- drm: vc4: Fix possible null pointer dereference</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
</package>
<package pkgid="8334c3299e5efd0abaafb86715e0389fe37875ab73fda515218f00ad239c7398" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="232.0.0.131.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-223.0.0.122" date="1723636800">- !10877  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- !10878  orangefs: fix out-of-bounds fsid access
- !10876  drm/i915/gt: Fix potential UAF by revoke of fence registers
- !10788 [OLK-5.10]sync some patch from upstream for Mini-OS
- !10523 [OLK-5.10] drivers: add GDR support
- !10885  crypto: aead,cipher - zeroize key buffer after use
- !10888  s390/pkey: Wipe copies of clear-key structures on failure
- !10820  powerpc/pseries: Whitelist dtl slub object for copying to userspace
- drivers: Fix kabi check failure
- drivers: Add GDR(GPU Direct RDMA) support
- !10842  netfilter: nf_tables: prefer nft_chain_validate
- !10869 v2  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10873  USB: serial: mos7840: fix crash on resume
- !10887 v3  sched/fair: Prefer physical cores when migrating tasks
- s390/pkey: Wipe copies of clear-key structures on failure
- sched/fair: Prefer physical cores when migrating tasks
- crypto: aead,cipher - zeroize key buffer after use
- orangefs: fix out-of-bounds fsid access
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- USB: serial: mos7840: fix crash on resume
- !10831  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- !10862 v2  ext4: flexibly control whether to enable dioread_nolock by default
- !10849  wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10817  media: dvb-frontends: tda10048: Fix integer overflow
- !10616  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- !10801  fix CVE-2024-42095
- !10514  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- !10704  x86: stop playing stack games in profile_pc()
- ext4: flexibly control whether to enable dioread_nolock by default
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- !10836  wifi: mt76: replace skb_put with skb_put_zero
- !10839  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- netfilter: nf_tables: prefer nft_chain_validate
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- !10814  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10807  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10810  tcp_metrics: validate source addr length
- !10766 Backport 5.10.213 LTS patches from upstream
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- !10752  btrfs: qgroup: fix quota root leak after quota disable failure
- media: dvb-frontends: tda10048: Fix integer overflow
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- !10781  nilfs2: fix kernel bug on rename operation of broken directory
- tcp_metrics: validate source addr length
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- !10733  filelock: Remove locks reliably when fcntl/close race is detected
- !10765 mbigen: add kvm dependency
- !10761  leds: an30259a: Use devm_mutex_init() for mutex initialization
- !10681  crypto: ecdh - explicitly zeroize private_key
- !10798  s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- serial: 8250_omap: Implementation of Errata i2310
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- mbigen: add kvm dependency
- !10778  Fix CVE-2021-47582
- !10784  s390/pkey: Wipe sensitive data on failure
- serial: max310x: implement I2C support
- serial: max310x: make accessing revision id interface-agnostic
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- serial: max310x: Unprepare and disable clock in error path
- getrusage: use sig-&gt;stats_lock rather than lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
- getrusage: add the "signal_struct *sig" local variable
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- ext4: convert to exclusive lock while inserting delalloc extents
- ext4: refactor ext4_da_map_blocks()
- ext4: make ext4_es_insert_extent() return void
- lsm: fix default return value of the socket_getpeersec_*() hooks
- lsm: make security_socket_getpeersec_stream() sockptr_t safe
- bpf: net: Change sk_getsockopt() to take the sockptr_t argument
- net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
- serial: max310x: prevent infinite while() loop in port startup
- serial: max310x: use a separate regmap for each port
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: Make use of device properties
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- xhci: handle isoc Babble and Buffer Overrun events properly
- xhci: process isoc TD properly when there was a transaction error mid TD.
- xhci: prevent double-fetch of transfer and transfer event TRBs
- xhci: remove extra loop in interrupt context
- um: allow not setting extra rpaths in the linux binary
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- selftests/mm: switch to bash from sh
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- geneve: make sure to pull inner header in geneve_rx()
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
- i40e: disable NAPI right after disabling irqs when handling xsk_pool
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- net: lan78xx: fix runtime PM count underflow on link stop
- lan78xx: Fix race conditions in suspend/resume handling
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Add missing return code checks
- lan78xx: Fix white space and style issues
- vhost: Add smp_rmb() in vhost_enable_notify()
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- s390/pkey: Wipe sensitive data on failure
- nilfs2: fix kernel bug on rename operation of broken directory
- usb: core: Don't hold the device lock while sleeping in do_proc_control()
- USB: core: Make do_proc_control() and do_proc_bulk() killable
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- btrfs: qgroup: fix quota root leak after quota disable failure
- filelock: Remove locks reliably when fcntl/close race is detected
- x86: stop playing stack games in profile_pc()
- crypto: ecdh - explicitly zeroize private_key
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
</package>
<package pkgid="7b89582ec7123d71b217383a25a1b24b2fe561994c4141579dcead8b06595e48" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="233.0.0.132.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-224.0.0.123" date="1724155200">- !9573 [OLK-5.10] Intel: backport RAPL bugfixes up to v6.9
- !11007  mm: avoid overflows in dirty throttling logic
- !10979  CVE-2024-42304
- !10968  bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- mm: avoid overflows in dirty throttling logic
- !10982  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- !10797 Intel: Backport SPR/EMR CXL and HBM support to kernel 5.10
- !10799 Intel: Backport 3 core PMU bugfixes to kernel 5.10
- !10958  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- !10963  sched: fix numa_group uninitialized in show_numa_stats()
- !10614  can: mcp251xfd: fix infinite loop when xmit fails
- !10951  Fix CVE-2024-36880
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- ext4: make sure the first directory block is not a hole
- ext4: check dot and dotdot of dx_root before making dir indexed
- !10956  leds: trigger: Unregister sysfs attributes before calling deactivate()
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- sched: fix numa_group uninitialized in show_numa_stats()
- !10931  drm/lima: fix shared irq handling on driver remove
- !10947  net: nexthop: Initialize all fields in dumped nexthops
- !10945 v4  Some clean up and bugfix for hisi_hbmdev
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- Bluetooth: qca: fix firmware check error path
- Bluetooth: qca: add missing firmware sanity checks
- net: nexthop: Initialize all fields in dumped nexthops
- soc/hisilicon: Remove the memdev kobj
- soc/hisilicon: Clean the hbmcache state show sysfs
- soc: hisilicon: Setting the demand_offline in sysfs interface
- Revert "soc: hisilicon: hisi_hbmdev: Provide extra memory topology information"
- Revert "soc: hisilicon: hisi_hbmdev: Add hbm acls repair and query methods"
- !10928  libceph: fix race between delayed_work() and ceph_monc_stop()
- drm/lima: fix shared irq handling on driver remove
- !10745  jfs: xattr: fix buffer overflow for invalid xattr
- libceph: fix race between delayed_work() and ceph_monc_stop()
- !10912  Fix CVE-2024-40966
- !10689 sdma: fix input validate problems
- !10914  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- tty: vt device use only n_tty ldisc
- tty: add the option to have a tty reject a new ldisc
- !10846  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- !10813 ima: dont disable digest_list if the file is not processed
- !10901 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
- perf/x86/intel: Add a distinct name for Granite Rapids
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Save the unit control address of all units
- ima: dont disable digest_list if the file is not processed
- drivers: misc: sdma-dae: fix input validate problems
- jfs: xattr: fix buffer overflow for invalid xattr
- can: mcp251xfd: fix infinite loop when xmit fails
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix a sparse warning in TPMI interface</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
</package>
<package pkgid="7ee03b8fd001b4bfa0b18412d3a3766906a674ba70961b46a318fd32cd2fa42c" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="234.0.0.133.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-225.0.0.124" date="1724760000">- !11079 Backport 5.10.214 - 5.10.215 LTS patches from upstream
- !11123  fix CVE-2024-42288
- !11163  btrfs: get rid of warning on transaction commit when using flushoncommit
- !11151  protect the fetch of -&gt;fd[fd
- !10113  Fixed two memory leak issues of the Perf tool
- !11092  mISDN: Fix a use after free in hfcmulti_tx()
- btrfs: get rid of warning on transaction commit when using flushoncommit
- !11071 【olk 5.10】net: hns3: add some feature patches
- !11085  f2fs: fix to don't dirty inode for readonly filesystem
- !11138 v2  drm/amd/display: Check for NULL pointer
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions
- !10925 [openEuler-22.03-LTS-SP4]UNIC: fixup the problem of print and free mguid'memory after init failed
- !11099  exec: Fix ToCToU between perm check and set-uid/gid usage
- !11070 IP notify code optimization
- !11118  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- !11028  remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !11075  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- !11003  tipc: Return non-zero value from tipc_udp_addr2str() on error
- !10985  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- !11115  net/iucv: fix use after free in iucv_sock_close()
- drm/amd/display: Check for NULL pointer
- !11054  m68k: Fix spinlock race in kernel thread creation
- !11055  phonet: fix rtm_phonet_notify() skb allocation
- !11126  drm/amd/display: Check pipe offset before setting vblank
- network_mgmt: Security check and modification.
- Fix the issue that the debugfs query inconsistency.
- UNIC: Fix the issue that RPS cannot hash sw irq to multiple cores.
- ubl: correct comments and delete unused EXPORT_SYMBOL
- unic: fix issue that return value is not processed
- unic: deleted redundant code and added default processing
- drm/amd/display: Check pipe offset before setting vblank
- scsi: qla2xxx: Fix for possible memory corruption
- !11091  net/mlx5: Always drain health in shutdown callback
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- net/iucv: fix use after free in iucv_sock_close()
- exec: Fix ToCToU between perm check and set-uid/gid usage
- !11027  landlock: Don't lose track of restrictions on cred_transfer
- mISDN: Fix a use after free in hfcmulti_tx()
- net/mlx5: Always drain health in shutdown callback
- f2fs: fix to don't dirty inode for readonly filesystem
- x86/head/64: Re-enable stack protection
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- kbuild: dummy-tools: adjust to stricter stackprotector check
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
- Bluetooth: btintel: Fixe build regression
- virtio: reenable config if freezing device failed
- drivers/nvme: Add quirks for device 126f:2262
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- usb: typec: tcpci: add generic tcpci fallback compatible
- tools: iio: replace seekdir() in iio_generic_buffer
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
- Input: allocate keycode for Display refresh rate toggle
- RDMA/cm: add timeout to cm_destroy_id wait
- libperf evlist: Avoid out-of-bounds access
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
- drm/amd/display: Fix nanosec stat overflow
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- ext4: add a hint for block bitmap corrupt state in mb_groups
- media: sta2x11: fix irq handler cast
- isofs: handle CDs with bad root inode but good Joliet root directory
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- ionic: set adminq irq affinity
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- panic: Flush kernel log buffer at the end
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- riscv: Fix spurious errors from __get/put_kernel_nofault
- s390/entry: align system call table on 8 bytes
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
- net: ravb: Always process TX descriptor ring
- Revert "usb: phy: generic: Get the vbus supply"
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: Update manufacturer details
- i40e: fix i40e_count_filters() to count only active/new filters
- octeontx2-pf: check negative error code in otx2_open()
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- net: stmmac: fix rx queue priority assignment
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
- io_uring: ensure '0' is returned on file registration success
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- dm integrity: fix out-of-range warning
- Octeontx2-af: fix pause frame configuration in GMP mode
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- usb: typec: ucsi: Ack unsupported commands
- usb: dwc2: gadget: LPM flow fix
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix remote wakeup from hibernation
- USB: core: Add hub_get() and hub_put() routines
- staging: vc04_services: fix information leak in create_component()
- staging: vc04_services: changen strncpy() to strscpy_pad()
- usb: cdc-wdm: close race between read and workqueue
- mmc: core: Avoid negative index with array access
- mmc: core: Initialize mmc_blk_ioc_data
- hexagon: vmlinux.lds.S: handle attributes section
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- init: open /initrd.image with O_LARGEFILE
- mm/migrate: set swap entry values of THP tail pages properly.
- mm/memory-failure: fix an incorrect use of tail pages
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- efivarfs: Request at most 512 bytes for variable names
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- printk: Update @console_may_schedule in console_trylock_spinning()
- tee: optee: Fix kernel panic caused by incorrect error handling
- mei: me: add arrow lake point H DID
- mei: me: add arrow lake point S DID
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- usb: port: Don't try to peer unused USB ports based on location
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
- netfilter: nf_tables: reject constant set with timeout
- comedi: comedi_test: Prevent timers rescheduling during deletion
- scripts: kernel-doc: Fix syntax error due to undeclared args variable
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- x86/stackprotector/32: Make the canary into a regular percpu variable
- vxge: remove unnecessary cast in kfree()
- drm/amd/display: Fix noise issue on HDMI AV mute
- drm/amd/display: Return the correct HDCP error code
- ahci: asm1064: asm1166: don't limit reported ports
- ahci: asm1064: correct count of reported ports
- wireguard: netlink: check for dangling peer via is_dead instead of empty list
- net: hns3: tracing: fix hclgevf trace event strings
- cpufreq: dt: always allocate zeroed cpumask
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- memtest: use {READ,WRITE}_ONCE in memory scanning
- drm/vc4: hdmi: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix waking up ring buffer readers
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI/AER: Block runtime suspend when handling errors
- speakup: Fix 8bit characters from direct synth
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- usb: gadget: tegra-xudc: Use dev_err_probe()
- phy: tegra: xusb: Add API to retrieve the port number of phy
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- nvmem: meson-efuse: fix function pointer type mismatch
- hwmon: (amc6821) add of_match table
- drm/etnaviv: Restore some id values
- mmc: core: Fix switch on gp3 partition
- dm-raid: fix lockdep waring in "pers-&gt;hot_add_disk"
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- serial: Lock console when calling into driver before registration
- printk/console: Split out code that enables default console
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- fuse: don't unhash root
- fuse: fix root lookup with nonzero generation
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: add device ID for VeriFone adapter
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- PM: suspend: Set mem_sleep_current during kernel command line setup
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix ip_fast_csum
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
- mtd: rawnand: meson: fix scrambling mode value in command macro
- ubi: correct the calculation of fastmap size
- ext4: correct best extent lstart adjustment logic
- selftests/mqueue: Set timeout to 180 seconds
- crypto: qat - resolve race condition during AER recovery
- crypto: qat - fix double free during reset
- sparc: vDSO: fix return value of __setup handler
- sparc64: NMI watchdog: fix return value of __setup handler
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- arm: dts: marvell: Fix maxium-&gt;maxim typo in brownstone dts
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- x86/bugs: Use sysfs_emit()
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
- net: hns3: add support for vf get dscp configuration from pf
- net: hns3: add support for vf multiple tcs
- !11045  bpf: Fix a segment issue when downgrading gso_size
- net: hns3: add support to query tc map info of VF queues
- net: hns3: fixed vf get max channels bug
- net: hns3: merge rss tc configuration
- net: hns3: add ieee_setmaxrate and ieee_getmaxrate support for pf
- !11038  PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- phonet: fix rtm_phonet_notify() skb allocation
- m68k: Fix spinlock race in kernel thread creation
- !11036 v2  Some bugfix for HNS RoCE
- !10999  media: venus: fix use after free in vdec_close
- !11013  media: mediatek: vcodec: Handle invalid decoder vsi
- !10971  ext4: fix infinite loop when replaying fast_commit
- !11022  udf: Avoid using corrupted block bitmap buffer
- bpf: Fix a segment issue when downgrading gso_size
- !11012  hfsplus: fix uninit-value in copy_name
- !10993  ipvs: properly dereference pe in ip_vs_add_service
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()
- RDMA/hns: Fix integer overflow in calc_loading_percent()
- RDMA/hns: Fix creating sysfs before allocating resources
- RDMA/hns: Fix concurrency between sysfs store and FW configuration of scc params
- RDMA/hns: Fix wrong output of sysfs scc pram when configuration failed
- RDMA/hns: Fix mixed use of u32 and __le32 in sysfs
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix HW UAF when destroy context timeout
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix soft lockup under heavy CEQE load
- RDMA/hns: Fix sleeping in spin_lock critical section
- RDMA/hns: Fix a potential Sleep-in-Atomic-Context
- RDMA/hns: Fix long waiting cmd event when reset
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Use one CQ bank per context
- !10976  CVE-2024-42126
- !10990  drm/amd/display: Add NULL pointer check for kzalloc
- !11019  net: usb: qmi_wwan: fix memory leak for not ip packets
- !11006  kvm: s390: Reject memory region operations for ucontrol VMs
- !11023  ocfs2: add bounds checking to ocfs2_check_dir_entry()
- !10991  s390/sclp: Fix sclp_init() cleanup on failure
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- !10962  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- landlock: Don't lose track of restrictions on cred_transfer
- !10453 v2  ipv6: sr: fix missing sk_buff release in seg6_input_core
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- udf: Avoid using corrupted block bitmap buffer
- net: usb: qmi_wwan: fix memory leak for not ip packets
- !11010 roh/rdma: Support rdma_cm and cnp configure
- !10995  CVE-2024-42290
- !10965  perf: Optimize perf_pmu_migrate_context()
- [PATCH OLK-5.10] RDMA/hns: Support getting GRH for UD in RoH mode when NLP = 0
- media: mediatek: vcodec: Handle invalid decoder vsi
- hfsplus: fix uninit-value in copy_name
- [PATCH OLK-5.10] Revert "RDMA/hns: Support RDMA_CM in ROH mode"
- [PATCH OLK-5.10] RDMA/hns: Support configure and query the CNP DSCP through sysfs
- [PATCH OLK-5.10] RDMA/hns: Support query FW cap bit
- kvm: s390: Reject memory region operations for ucontrol VMs
- tipc: Return non-zero value from tipc_udp_addr2str() on error
- media: venus: fix use after free in vdec_close
- irqchip/imx-irqsteer: Handle runtime power management correctly
- ipvs: properly dereference pe in ip_vs_add_service
- s390/sclp: Fix sclp_init() cleanup on failure
- drm/amd/display: Add NULL pointer check for kzalloc
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- Revert "powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt."
- ext4: fix infinite loop when replaying fast_commit
- perf: Optimize perf_pmu_migrate_context()
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- UNIC: bugfix for mguid's memory not be free after netdev init fail
- UNIC: Solve the problem of redundant print in ub mode
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- perf stat: Fix memory leakage when trying perf on an offline CPU
- perf parse-events: Fix one memory leakage issue</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
</package>
<package pkgid="8b54b1126f33587145c86073f0775913788c8010d02fa1ead94c60c519ff7ac5" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="235.0.0.134.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-226.0.0.125" date="1725451200">- !11372  xdp: fix invalid wait context of page_pool_destroy()
- !11376  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- !11356  f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- !11347 v2  ext4: sanity check for NULL pointer after ext4_force_shutdown
- !11368  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- !11358  kcm: Serialise kcm_sendmsg() for the same socket.
- !11327  CPU inspect bugfix
- !11340  soc: hisilicon: Support memory repair driver
- !10970  PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- !11324  drm/amd/display: Add null checker before passing variables
- !11320 [olk 5.10] hns3驱动支持rx/tx配置 tc buffer
- !11284  fix CVE-2024-43905
- !11343  netfilter: ctnetlink: use helper function to calculate expect ID
- !11330  jbd2: avoid mount failed when commit block is partial submitted
- !11190  fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- !11201  ibmvnic: don't release napi in __ibmvnic_open()
- !11306 hns3 udma: fix bugs of invalid input check and remove dependency of ubl
- !10748 v2  CVE-2024-41016
- !11295  padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11313  nvme-fabrics: use reserved tag for reg read/write command
- !11310  drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- xdp: fix invalid wait context of page_pool_destroy()
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- kcm: Serialise kcm_sendmsg() for the same socket.
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- netfilter: ctnetlink: use helper function to calculate expect ID
- config: enable CONFIG_HISI_MEM_RAS by default
- docs: ABI: add ABI document for driver hisi_mem_ras
- soc: hisilicon: Support memory repair driver on Kunpeng SoC
- !11337 v3  Some features and fixs for hbmdev and hbm cache
- ACPI/HMAT: Add missing locality information for hot-added device
- hisilicon/hisi_hbmdev: Add lock to protect pcc operation region
- hisilicon/hisi_hbmcache: Add a lock to protect pcc operation region
- soc:hisilicon: Use _ON and _OFF in hbmcache
- jbd2: avoid mount failed when commit block is partial submitted
- cpuinspect: fix [stop/start]_inspect_threads return type
- cpuinspect: make inspector unregister reliable
- drm/amd/display: Add null checker before passing variables
- nvme-fabrics: use reserved tag for reg read/write command
- hns3 udma: remove UBL dependency.
- hns3 udma: add verify udata and in/out addr.
- hns3 udma: fix bugs of code review.
- hns3 udma: fixed some bugs.
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it
- net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
- !11058  drm/amdgpu: change vm-&gt;task_info handling
- !11057  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- !11221  apparmor: Fix null pointer deref when receiving skb during sock creation
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- !11246 [olk 5.10] hns3驱动一些bugfix patch
- !11247 [openEuler-22.03-LTS-SP4]UNIC: Using UBL-related macros to isolate UB header files
- !11273  serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- !11211  drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11275  wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11271 roh/core: Avoid null pointer access and optimize code.
- UNIC: Use the macro CONFIG_HNS3_UBL to isolate debugfs dentry
- UNIC: Using UBL-related macros to isolate UB header files
- roh/core: Avoid null pointer access and optimize code.
- wifi: cfg80211: Avoid Wdiscarded-qualifiers warning
- !11267  net: bridge: mcast: wait for previous gc cycles when removing port
- serial: core: check uartclk for zero to avoid divide by zero
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- net: hns3: use the user's cfg after reset
- net: hns3: fix delete tc fail issue
- net: bridge: mcast: wait for previous gc cycles when removing port
- !11241  CVE-2024-43892
- !11217  scsi: qla2xxx: validate nvme_local_port correctly
- !11181  block: initialize integrity buffer to zero before writing it to media
- !11111  sysctl: always initialize i_uid/i_gid
- !11194  Fix mainline patchs
- !11230  Bluetooth: MGMT: Add error handling to pair_device()
- !11210  jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11171  tracing: Fix overflow in get_free_elt()
- !11169  CVE-2024-42267
- memcg: protect concurrent access to mem_cgroup_idr
- !11174  md: restore 'noio_flag' for the last mddev_resume()
- Bluetooth: MGMT: Add error handling to pair_device()
- apparmor: Fix null pointer deref when receiving skb during sock creation
- !11182  CVE-2024-42287
- scsi: qla2xxx: validate nvme_local_port correctly
- !11159  usb: vhci-hcd: Do not drop references before new references are gained
- !11184 【OLK 5.10】spi: spidev some bugfix
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- !11140  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- !11147  powerpc/pseries: Fix scv instruction crash with kexec
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- !11187  Bugfix patches for hns RoCE
- ibmvnic: don't release napi in __ibmvnic_open()
- perf/x86/amd/core: Fix overflow reset on hotplug
- perf/x86/amd/core: Always clear status for idx
- spi: spidev: fix a recursive locking error
- fs/ntfs3: Update log-&gt;page_{mask,bits} if log-&gt;page_size changed
- spi: spidev: fix a race condition when accessing spidev-&gt;spi
- RDMA/hns: Fix list_*_careful() not being used in pairs
- RDMA/hns: Fix a meaningless loop in active_dca_pages_proc()
- RDMA/hns: Fix possible RAS when DCA is not attached
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- scsi: qla2xxx: Complete command early within lock
- block: initialize integrity buffer to zero before writing it to media
- md: restore 'noio_flag' for the last mddev_resume()
- tracing: Fix overflow in get_free_elt()
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- usb: vhci-hcd: Do not drop references before new references are gained
- powerpc/pseries: Fix scv instruction crash with kexec
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- sysctl: always initialize i_uid/i_gid
- drm/amdgpu: change vm-&gt;task_info handling
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
</package>
<package pkgid="30d128bc0ebcea269a6895cc852010cbf0b3485b42dfbb8f821c435494a6c376" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="236.0.0.135.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-227.0.0.126" date="1725883200">- !11282  CVE-2024-44935
- !11450  ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11435  cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- !11437 sdma-dae:fix code review problems
- ACPI/HMAT: Fix compile error when CONFIG_ACPI_HMAT is not enabled
- !11041 coresight: etm4x: Fix unbalanced pm_runtime_enable()
- !11439 v2  drm/amd/display: Fix null pointer deref in dcn20_resource.c
- !11015  nvme-pci: add missing condition check for existence of mapped data
- !11432 v2  mm/block: add bdi sysfs knobs
- !11316  block: fix pin count management when merging same-page segments
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- drivers:misc:sdma-dae: fix icsl code check problems
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- cifs: Fix pages leak when cifs_writedata allocate fails in cifs_writedata_direct_alloc()
- mm: fix arithmetic for bdi min_ratio
- mm: fix arithmetic for max_prop_frac when setting max_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_ratio_fine knob
- mm: add bdi_set_min_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/max_ratio_fine knob
- mm: add bdi_set_max_ratio_no_scale() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add /sys/class/bdi/&lt;bdi&gt;/min_bytes knob
- mm: add bdi_set_min_bytes() function
- mm: split off __bdi_set_min_ratio() function
- mm: add bdi_get_min_bytes() function
- mm: document /sys/class/bdi/&lt;bdi&gt;/max_bytes knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/max_bytes
- mm: add bdi_set_max_bytes() function
- mm: split off __bdi_set_max_ratio() function
- mm: add bdi_get_max_bytes() function
- mm: use part per 1000000 for bdi ratios
- mm: rework calculation of bdi_min_ratio in bdi_set_min_ratio
- mm: document /sys/class/bdi/&lt;bdi&gt;/strict_limit knob
- mm: add knob /sys/class/bdi/&lt;bdi&gt;/strict_limit
- mm: add bdi_set_strict_limit() function
- !11417  md/raid5: avoid BUG_ON() while continue reshape after reassembling
- !11207  kprobe support %pd/%pD type
- !11430  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !11391  fix CVE-2023-45896
- !11405  dma: fix call order in dmam_free_coherent
- !11237  CVE-2024-43907
- !11409  btrfs: do not start relocation until in progress drops are done
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- !10904 Incorporate some bonding patches as follows(OLK_5.10):
- !11341  nfsd: map the EBADMSG to nfserr_io to avoid warning
- !11390  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- btrfs: do not start relocation until in progress drops are done
- !11398  fuse: Initialize beyond-EOF page contents before setting uptodate
- !11403  btrfs: do not WARN_ON() if we have PageError set
- dma: fix call order in dmam_free_coherent
- !11394  dmaengine: idxd: Prevent use after free on completion memory
- btrfs: do not WARN_ON() if we have PageError set
- fuse: Initialize beyond-EOF page contents before setting uptodate
- dmaengine: idxd: Prevent use after free on completion memory
- fs/ntfs3: Add more attributes checks in mi_enum_attr()
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- block: fix pin count management when merging same-page segments
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- sctp: move hlist_node and hashent out of sctp_ep_common
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- RDMA/hns: Fix concurrency issue between bond work and bond event
- RDMA/hns: Fix UAF in clear bond printing
- RDMA/hns: Encapsulate upper event and lowerstate event handlers
- RDMA/hns: Register notifier block of bonding events in bond_grp
- selftests/ftrace: add kprobe test cases for VFS type "%pd" and "%pD"
- Documentation: tracing: add new type '%pd' and '%pD' for kprobe
- tracing/probes: support '%pD' type for print struct file's name
- tracing/probes: support '%pd' type for print struct dentry's name
- nvme-pci: add missing condition check for existence of mapped data</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
</package>
<package pkgid="09cc1daed9b0f72523a3386ddfd5a8c78b6939ddb4656b4f821c19aa705205cf" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="237.0.0.136.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-228.0.0.127" date="1726142400">- !11504 sdma-dae support debugfs and fast mode
- !10195  xfs: Fix agf_longest update error
- !11505  Misc minor bugfix for HNS RoCE
- RDMA/hns: Fix endian issues
- RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid
- RDMA/hns: Fix "Should it be static?" warnings
- RDMA/hns: Fix dereference of noderef expression
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- drivers:misc:sdma-dae: add fast mode
- !11479 【OLK 5.10】some bugfixes for hns3 driver
- driver:misc:sdma-dae: not expose sq_tail write and add validation of cq_head
- driver:misc:sdma-dae: add debugfs of sdma-dae
- !11490 RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11478  coresight: etm4x: Fix CPU idle PM support for ETE
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- !11491  Fix CVE-2022-48887
- net: hns3: fix wrong use of semaphore up
- !11463  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- !11462  mptcp: pm: avoid possible UaF when selecting endp
- !11470 OLK-5.10 Rever gpiolib bugfix
- drm/vmwgfx: Remove rcu locks from user resources
- drm/vmwgfx: Remove vmw_user_bo_noref_release
- drm/vmwgfx: Introduce ttm reference object find function
- RDMA/hns: Fix missing unlock of scc_mutex in error path
- !11487  bna: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- coresight: etm4x: Fix access to resource selector registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: add CPU hotplug support for probing
- !11276 [OLK-5.10]perf: Support event alias in form foo-bar-baz
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11467 [sync] PR-11465: 【olk 6.6】net: hns3: some bugfixes for netdev
- !11466 OLK-5.10 Rever spi bugfix
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
- Revert "spi: hisi-kunpeng: Add validation for the minimum value of speed_hz"
- Revert "spi: Add verification for the max_frequency provided by the firmware"
- !11104  soc: qcom: pdr: protect locator_addr with the main mutex
- !11453  nfs: fix memory leak in error path of nfs4_do_reclaim
- !11447  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- mptcp: pm: avoid possible UaF when selecting endp
- nfs: fix memory leak in error path of nfs4_do_reclaim
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- perf parse-event bugfix merge
- perf test: Add parse-events test for aliases with hyphens
- perf test: Add pmu-events test for aliases with hyphens
- perf parse-events: Support event alias in form foo-bar-baz
- soc: qcom: pdr: protect locator_addr with the main mutex
- xfs: Fix agf_longest update error
- Fix x86 provides error symbol</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
</package>
<package pkgid="cbec9d7b651250f9040fc7ea748681ffecd136d3e720f6bc4f18277f92d7e0e2" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="238.0.0.137.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-229.0.0.128" date="1726660800">- !11565 ip_notify:Clean up redundant import files
- network_mgmt: Clean up redundant import files for ip_notify.c.
- !11521  ipv6: prevent UAF in ip6_send_skb()
- !11517  ipv6: fix possible UAF in ip6_finish_output2()
- !11514  fix CVE-2024-44988
- !11526 IP notify code optimization
- !11552  mm/hugetlb: fix pgtable lock on pmd sharing
- network_mgmt: Add ip_notify timer print.
- !11548  ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11553  mm: fix failure to unmap pte on highmem systems
- !11488  wifi: nl80211: don't free NULL coalescing rule
- mm: fix failure to unmap pte on highmem systems
- mm/hugetlb: fix pgtable lock on pmd sharing
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11456 Backport 5.10.216 LTS patches from upstream
- !11484  drm/qxl: Add check for drm_cvt_mode
- !11457  usb: gadget: core: Check for unset descriptor
- !11475  Fix CVE-2023-52916
- !11510  x86/mtrr: Check if fixed MTRRs exist before saving them
- ipv6: prevent UAF in ip6_send_skb()
- ipv6: fix possible UAF in ip6_finish_output2()
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- x86/mtrr: Check if fixed MTRRs exist before saving them
- !11507  mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- mm: backing-dev: set variables dev_attr_min,max_bytes storage-class-specifier to static
- wifi: nl80211: don't free NULL coalescing rule
- drm/qxl: Add check for drm_cvt_mode
- media: aspeed: Fix memory overwrite if timing is 1600x900
- media: aspeed: Fix no complete irq for non-64-aligned width
- usb: gadget: core: Check for unset descriptor
- udp: preserve the connected status if only UDP cmsg
- dma: xilinx_dpdma: Fix locking
- idma64: Don't try to serve interrupts when device is powered off
- dmaengine: owl: fix register access functions
- mtd: diskonchip: work around ubsan link failure
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- net: b44: set pause params only when interface is up
- ethernet: Add helper for assigning packet type when dest address does not match device address
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- PM / devfreq: Fix buffer overflow in trans_stat_show
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
- tracing: Show size of requested perf buffer
- Revert "crypto: api - Disallow identical driver names"
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- iavf: Fix TC config comparison with existing adapter TC config
- i40e: Report MFS in decimal base instead of hex
- netfilter: nf_tables: honor table dormant flag from netdev release event path
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- ipvs: Fix checksumming on GSO of SCTP packets
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize
- NFC: trf7970a: disable all regulators on removal
- mlxsw: core: Unregister EMAD trap using FORWARD action
- vxlan: drop packets from invalid src-address
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
- arm64: dts: mediatek: mt7622: add support for coherent DMA
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- nilfs2: fix OOB in nilfs_set_de_type
- nouveau: fix instmem race condition around ptr stores
- mei: me: disable RPL-S on SPS and IGN firmwares
- usb: Disable USB3 LPM at shutdown
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- Revert "usb: cdc-wdm: close race between read and workqueue"
- USB: serial: option: add Telit FN920C04 rmnet compositions
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Fibocom FM135-GL variants
- comedi: vmk80xx: fix incomplete endpoint checking
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Avoid notify PM core about runtime PM resume
- clk: Get runtime PM before walking tree during disable_unused
- clk: Initialize struct clk_core kref earlier
- clk: Print an info line before disabling unused clocks
- clk: remove extra empty line
- clk: Mark 'all_lists' as const
- clk: Remove prepare_lock hold assertion in __clk_release()
- drm/panel: visionox-rm69299: don't unregister DSI device
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- selftests/ftrace: Limit length in subsystem-enable tests
- btrfs: record delayed inode root in transaction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- selftests: timers: Fix abs() warning in posix_timers test
- x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
- btrfs: qgroup: correctly model root qgroup rsv in convert
- mailbox: imx: fix suspend failue
- iommu/vt-d: Allocate local memory for page request queue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix potential sign extension issue
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fib: hide unused 'pn' variable
- octeontx2-af: Fix NIX SQ mode and BP config
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- net: openvswitch: fix unwanted error log on timeout policy probing
- nouveau: fix function cast warning
- media: cec: core: remove length check of Timer Status</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
</package>
<package pkgid="edfb9176f89d7c47b6f944288982bf9ce1680bfb1dcc098cf4ac340e90c0ce61" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="239.0.0.138.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-230.0.0.129" date="1727265600">- !11771  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11729  scsi: qedi: Fix crash while reading debugfs attribute
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11706  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11707  btrfs: fix qgroup reserve leaks in cow_file_range
- !11723 v2  Squashfs: sanity check symbolic link size
- !11708  CVE-2024-46751
- !11728  lib: objagg: Fix general protection fault
- !11727  jfs: fix null ptr deref in dtInsertEntry
- !11726  drm/vmwgfx: Fix a deadlock in dma buf fence polling
- !11690  sch/netem: fix use after free in netem_dequeue
- !11693  Fix CVE-2024-39501
- !11625  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11701  userfaultfd: fix checks for huge PMDs
- !11698  x86/mm: Fix pti_clone_pgtable() alignment assumption
- scsi: qedi: Fix crash while reading debugfs attribute
- lib: objagg: Fix general protection fault
- jfs: fix null ptr deref in dtInsertEntry
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- Squashfs: sanity check symbolic link size
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- userfaultfd: fix checks for huge PMDs
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- driver core: Fix uevent_show() vs driver detach race
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- drivers: core: synchronize really_probe() and dev_uevent()
- !9476 [22.03-LTS-SP3]enable CONFIG_BPF_LSM option by default to use safegurad
- !8831 Add support for Hygon model 7h processors
- !11665  drm/amd/pm: fix the Out-of-bounds read warning
- sch/netem: fix use after free in netem_dequeue
- !11640  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11649  fix CVE-2024-46714
- drm/amd/pm: fix the Out-of-bounds read warning
- !11632  fix CVE-2024-46723
- !11555 v2  Fix CVE-2024-45025
- !11588  drm/amd/display: Skip finding free audio for unknown engine_id
- !11586  jfs: don't walk off the end of ealist
- !11579  kobject_uevent: Fix OOB access within zap_modalias_env()
- !11637  netfilter: tproxy: bail out if IP has been disabled on the device
- !11562  Backport bugfix from mainline
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- netfilter: tproxy: bail out if IP has been disabled on the device
- !11628 [OLK-5.10]Add description for HiSilicon PCIe PMU driver,Some updates for HiSilicon PCIe PMU
- !11612  Input: uinput - reject requests with unreasonable number of slots
- drm/amdgpu: fix ucode out-of-bounds read
- !11615  mmc: mmc_test: Fix NULL dereference on allocation failure
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- docs: fix 'make htmldocs' warning in perf
- docs: perf: Fix build warning of hisi-pcie-pmu.rst
- docs: perf: Update usage for target filter of hisi-pcie-pmu
- drivers/perf: hisi: Add TLP filter support
- Documentation: perf: Indent filter options list of hisi-pcie-pmu
- docs: perf: Fix PMU instance name of hisi-pcie-pmu
- docs: perf: Add description for HiSilicon PCIe PMU driver
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11606  Fix iBMA bug and change version
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Input: uinput - reject requests with unreasonable number of slots
- !11592  CVE-2024-36915
- !10933  drm/amd/display: Check index msg_id before read or write
- !10936  ata: libata-core: Fix null pointer dereference on error
- !11604 hns3 udma: add resource allocation and change name of struct
- BMA: Fix edma driver initialization problem and change the version number.
- !11593  gtp: pull network headers in gtp_dev_xmit()
- hns3 udma: add prefix hns3 for udma.
- !11583  nfs: always check dreq-&gt;error after a commit
- !11584  vfs: Don't evict inode under the inode lru traversing context
- !11577  tcp: fix one compile error in __inet_hash_connect()
- !11578  net: fix one compile error in net_rship_refresh_timeout()
- gtp: pull network headers in gtp_dev_xmit()
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- net: add copy_safe_from_sockptr() helper
- drm/amd/display: Skip finding free audio for unknown engine_id
- !11574  nilfs2: add missing check for inode numbers on directory entries
- jfs: don't walk off the end of ealist
- vfs: Don't evict inode under the inode lru traversing context
- nfs: always check dreq-&gt;error after a commit
- kobject_uevent: Fix OOB access within zap_modalias_env()
- net: fix one compile error in net_rship_refresh_timeout()
- tcp: fix one compile error in __inet_hash_connect()
- nilfs2: add missing check for inode numbers on directory entries
- !11570  NFSD: Fix ia_size underflow
- NFSD: Fix ia_size underflow
- mm/compaction: correctly return failure with bogus compound_order in strict mode
- mm/hugetlb: fix nodes huge page allocation when there are surplus pages
- mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes
- bootmem: use kmemleak_free_part_phys in free_bootmem_page
- bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
- mm: migrate: fix THP's mapcount on isolation
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- enable CONFIG_BPF_LSM option by default to use safegurad
- ata: libata-core: Fix null pointer dereference on error
- drm/amd/display: Check index msg_id before read or write
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- Fix error kernel provides</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
</package>
<package pkgid="dc1b66107a13d0682499ca414b990f946d1ccd5aed24786d7a5363938fdb8023" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="240.0.0.139.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-231.0.0.130" date="1728561600">- !11964  drm/amd/pm: Fix negative array index read
- !12073  kprobes: Fix deadlock issue with kmemleak
- !12062  CVE-2024-46857
- kprobes: Fix deadlock issue with kmemleak
- !12050  um: line: always fill *error_out in setup_one_line()
- !11958 [OLK-5.10] Intel: Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86 to enable PCIe eDPC
- !12020  drm/amd/display: Check gpio_id before used as array index
- !12024  ASoC: meson: axg-card: fix 'use-after-free'
- !12034  ksmbd: discard write access to the directory open
- !12038  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !11942  sbitmap: backport bugfix patches
- net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: E-switch, Introduce flag to indicate if fdb table is created
- !11998  drm/amd/display: Add array index check for hdcp ddc access
- !12011  rtmutex: Drop rt_mutex::wait_lock before scheduling
- um: line: always fill *error_out in setup_one_line()
- !11940 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !12015  perf/x86/intel: Limit the period on Haswell
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12028  Fix CVE-2024-44958 for olk-5.10
- !12032  serial: sc16is7xx: fix invalid FIFO access with special register set
- !12002  drm/amd/display: Assign linear_pitch_alignment even for VM
- ksmbd: discard write access to the directory open
- serial: sc16is7xx: fix invalid FIFO access with special register set
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched: Revert fix unbalance sched_smt_present dec/inc
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/amd/display: Check gpio_id before used as array index
- !11999  nvmet-tcp: fix kernel crash if commands allocation fails
- perf/x86/intel: Limit the period on Haswell
- !12006 v3  add steal_task for cgroup
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- sched/core: Add mutex lock to protect steal_task
- sched/debug: Add h_nr_running/steal_h_nr_running in sched_debug
- sched/fair: Set the maximum number of steal attempts
- sched/fair: Count the number of tasks marked as steal_task on cfs_rq
- sched/topology: Remove SCHED_STEAL_NODE_LIMIT_DEFAULT
- sched/core: Add cpu.steal_task in cgroup v1 cpu subsystem
- sched/fair: Add group_steal in cmdline to enable STEAL for cgroup
- Revert "sched: add mutex lock to protect qos_level"
- !11907  ksmbd: unset the binding mark of a reused connection
- drm/amd/display: Assign linear_pitch_alignment even for VM
- nvmet-tcp: fix kernel crash if commands allocation fails
- drm/amd/display: Add array index check for hdcp ddc access
- !11976  CVE-2024-46814
- !11941  usb: typec: ucsi: Fix null pointer dereference in trace
- !11939  of/irq: Prevent device address out-of-bounds read in interrupt map walk
- !11938  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/pm: Fix negative array index read
- Enable CONFIG_PCIE_EDR in openeuler_defconfig for x86
- !11946  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11916  ethtool: check device is present when getting link settings
- !11935  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11922  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11928  Some bug fix patches for OLK-5.10 hns RoCE
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- blk-mq: Fix potential io hung for shared sbitmap per tagset
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- sbitmap: fix lockup while swapping
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up()
- sbitmap: fix possible io hung due to lost wakeup
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- blk-mq: fix potential io hang by wrong 'wake_batch'
- sbitmap: correct wake_batch recalculation to avoid potential IO hung
- blk-mq: Fix wrong wakeup batch configuration which will cause hang
- blk-mq: fix tag_get wait task can't be awakened
- usb: typec: ucsi: Fix null pointer dereference in trace
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11925  nilfs2: protect references to superblock parameters exposed in sysfs
- !11914  sched: fix a deadlock in task_net_group()
- !11843  CVE-2024-46771
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Revert "RDMA/hns: Fix ah error counter in sw stat not increasing when sl is invalid"
- RDMA/hns: Fix RoCEE hang when multiple QP banks use EXT_SGE
- RDMA/hns: Use one CQ bank per context for HIP09
- RDMA/hns: Fix the inconsistency between input max_send_sge and output max_send_sge
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11896 [sync] PR-11831:  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- ethtool: check device is present when getting link settings
- !11900 [sync] PR-11851:  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- !11899 [sync] PR-11849:  bcache: fix variable length array abuse in btree_iter
- !11898 [sync] PR-11833:  scsi: bfa: Ensure the copied buf is NUL terminated
- !11897 [sync] PR-11832:  enic: Validate length of nl attributes in enic_set_vf_port
- !11895 [sync] PR-11830:  ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- sched: fix a deadlock in task_net_group()
- !11867  pktgen: use cpus_read_lock() in pg_net_init()
- !11890  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- ksmbd: unset the binding mark of a reused connection
- !11864  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11903  scsi: aacraid: Fix double-free on probe failure
- !11875  btrfs: handle errors from btrfs_dec_ref() properly
- scsi: aacraid: Fix double-free on probe failure
- !11887  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- bcache: fix variable length array abuse in btree_iter
- scsi: bfa: Ensure the copied buf is NUL terminated
- enic: Validate length of nl attributes in enic_set_vf_port
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- !11881  PCI: Add missing bridge lock to pci_bus_lock()
- !11882  usb: dwc3: st: fix probed platform device ref count on probe error path
- !11871  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11866 v2  drm/amd/display: Ensure index calculation will not overflow
- !11791  nilfs2: fix missing cleanup on rollforward recovery error
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11828 v2  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- usb: dwc3: st: fix probed platform device ref count on probe error path
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: handle errors from btrfs_dec_ref() properly
- !11767 [sync] PR-11733:  Input: MT - limit max slots
- !11847  bpf: verifier: prevent userspace memory access
- !11749  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11817  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- pktgen: use cpus_read_lock() in pg_net_init()
- drm/amd/display: Ensure index calculation will not overflow
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11494  ext4: Fix race in buffer_head read fault injection
- !11677  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11673  netem: fix return value if duplicate enqueue fails
- !11810  apparmor: fix possible NULL pointer dereference
- !11805  drm/amdgpu: Fix out-of-bounds write warning
- !11678  udf: Avoid excessive partition lengths
- !11680  binder: fix UAF caused by offsets overwrite
- !11784  perf/x86: Serialize set_attr_rdpmc()
- !11815  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- bpf: verifier: prevent userspace memory access
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- !11741  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11788 The ip_notify_sysfs_create function logs are recorded using the netdev_err interface.
- !11801  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- apparmor: fix possible NULL pointer dereference
- drm/amdgpu: Fix out-of-bounds write warning
- modify for ICSL.
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- nilfs2: fix missing cleanup on rollforward recovery error
- perf/x86: Serialize set_attr_rdpmc()
- !11730  media: xc2028: avoid use-after-free in load_firmware_cb()
- !11738  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11752  driver: iio: add missing checks on iio_info's callback access
- !11773  A group of optimization and bug fix for numa-affinity
- mm: numa-affinity: fix build error when !CONFIG_PROC_SYSCTL
- mm: numa-affinity: adapt for task_numa_placement
- mm: numa-affinity: adapt for should_numa_migrate_memory
- mm: numa-affinity: add helper numa_affinity_sampling_enabled()
- mm: thp: support to control numa migration
- Input: MT - limit max slots
- driver: iio: add missing checks on iio_info's callback access
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- media: xc2028: avoid use-after-free in load_firmware_cb()
- binder: fix UAF caused by offsets overwrite
- udf: Avoid excessive partition lengths
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- netem: fix return value if duplicate enqueue fails
- ext4: Fix race in buffer_head read fault injection</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-232.0.0.131" date="1728993600">- !12102  Fix CVE-2024-46826
- !12219 v7  xfs: some fix for forcealign
- !12121  CVE-2024-43855
- !12204  Backport "ima: Avoid blocking in RCU read-side critical section"
- xfs: correct the truncate blocksize of forcealign
- xfs: refactor the truncating order
- iomap: pass blocksize to iomap_truncate_page()
- math64: add rem_u64() to just return the remainder
- xfs: only bunmap align in datafork for forcealign
- xfs: forcealign not compatible with reflink and realtime device
- xfs: simplify extent allocation alignment
- xfs: don't attempting non-aligned fallbacks alloc for forcealign
- xfs: Don't revert allocated offset for forcealign
- xfs: align args-&gt;minlen for forced allocation alignment
- xfs: always tail align maxlen allocations
- xfs: only allow minlen allocations when near ENOSPC
- !12136 Backport some SAS patches to OLK-5.10
- !12215  net/hinic3: fix version showed in ethtool
- !12166  crypto: stm32/cryp - call finalize with bh disabled
- !12207 v2  atm: idt77252: prevent use after free in dequeue_rx()
- net/hinic3: fix version showed in ethtool
- !12142  nfc: pn533: Add poll mod list filling check
- !12149  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !12139  arm64/mpam: Be compatible with MPAM architecture v1.x
- atm: idt77252: prevent use after free in dequeue_rx()
- !12172  fou: remove warn in gue_gro_receive on unsupported protocol
- !12170  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12163  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12133  ALSA: line6: Fix racy access to midibuf
- fou: remove warn in gue_gro_receive on unsupported protocol
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- crypto: stm32/cryp - call finalize with bh disabled
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12127  sched: sch_cake: fix bulk flow accounting logic for host fairness
- !12126  ice: Add netif_device_attach/detach into PF reset flow
- !12125  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12135 Backport 5.10.217 LTS patches from upstream
- regulator: core: fix debugfs creation regression
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- mei: me: add lunar lake point M DID
- ASoC: tegra: Fix DSPK 16-bit playback
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- iio: accel: mxc4005: Interrupt handling fixes
- iio:imu: adis16475: Fix sync mode setting
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- usb: dwc3: core: Prevent phy suspend during init
- usb: xhci-plat: Don't include xhci.h
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: ohci: Prevent missed ohci interrupts
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
- usb: typec: ucsi: Fix connector check on init
- usb: typec: ucsi: Check for notifications after init
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- kcov: Remove kcov include from sched.h and move it to its users.
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- net:usb:qmi_wwan: support Rolling modules
- drm/nouveau/dp: Don't probe eDP ports twice harder
- fs/9p: drop inodes immediately on non-.L too
- clk: Don't hold prepare_lock when calling kref_put()
- gpio: crystalcove: Use -ENOTSUPP consistently
- gpio: wcove: Use -ENOTSUPP consistently
- 9p: explicitly deny setlease attempts
- fs/9p: translate O_TRUNC into OTRUNC
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- gpu: host1x: Do not setup DMA for virtual devices
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- btrfs: always clear PERTRANS metadata during commit
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Fix added raw MSR output
- ata: sata_gemini: Check clk_enable() result
- net: bcmgenet: Reset RBUF on first open
- ALSA: line6: Zero-initialize message buffers
- btrfs: return accurate error code on open failure in open_fs_devices()
- net: mark racy access on sk-&gt;sk_rcvbuf
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- gfs2: Fix invalid metadata access in punch_hole
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- net: gro: add flush check in udp_gro_receive_segment
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- cxgb4: Properly lock TX queue for the selftest.
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ASoC: Fix 7/8 spaces indentation in Kconfig
- net: qede: use return from qede_parse_actions()
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- net l2tp: drop flow hash on forward
- s390/mm: Fix clearing storage keys for huge pages
- s390/mm: Fix storage key clearing for guest huge pages
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- nfc: pn533: Add poll mod list filling check
- arm64/mpam: Be compatible with MPAM architecture v1.x
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: libsas: Set port when ex_phy is added or deleted
- scsi: libsas: Move sas_add_parent_port() to sas_expander.c
- scsi: libsas: Add helper for port add ex_phy
- ALSA: line6: Fix racy access to midibuf
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ice: Add netif_device_attach/detach into PF reset flow
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12045  s390/dasd: fix error recovery leading to data corruption on ESE devices
- !12043  s390/sclp: Prevent release of buffer in I/O
- md: ensure child flush IO does not affect origin bio-&gt;bi_status
- md: Remove flush handling
- !8834 Add support for Hygon model 10h processors
- !12105  sched/fair: Fix the condition in overload_clear
- !12103  sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- !12003  perf cpumap: Wrapper for CPU map indices
- !12096  CVE-2024-46858
- !12095  net: dpaa: Pad packets to ETH_ZLEN
- !12094  netfilter: nft_socket: fix sk refcount leaks
- !12089  USB: usbtmc: prevent kernel-usb-infoleak
- sched/fair: Fix the condition in overload_clear
- sched/debug: Fix h_nr_running/steal_h_nr_running in sched_debug
- ELF: Fix mixed declarations and code of "snapshot_randomize_va_space"
- ELF: fix kernel.randomize_va_space double read
- mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
- mptcp: export lookup_anno_list_by_saddr
- net: dpaa: Pad packets to ETH_ZLEN
- netfilter: nft_socket: fix sk refcount leaks
- !12088  tracing: Have tracing_max_latency inc the trace array ref count
- USB: usbtmc: prevent kernel-usb-infoleak
- tracing: Have tracing_max_latency inc the trace array ref count
- !11856  acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- !12084  drm/i915/gt: Cleanup partial engine discovery failures
- !12048  Add generic xdp xsk multi-buffer recv for ipvlan
- !12078  btrfs: clean up our handling of refs == 0 in snapshot delete
- !12053  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/i915/gt: Cleanup partial engine discovery failures
- !11558  mm/ksm: fix possible UAF of stable_node
- !11889 UNIC: Invoke the hns3_unic_set_default_cc in advance and modify ublhdr struct
- btrfs: clean up our handling of refs == 0 in snapshot delete
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- xsk: Add generic xdp multi-buffer recv support
- ipvlan: support use xdp native mode
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- s390/sclp: Prevent release of buffer in I/O
- perf cpumap: Wrapper for CPU map indices
- UNIC: The ublhdr structure and UBL_HLEN macro are modified
- UNIC: Invoke the hns3_unic_set_default_cc in advance
- acpi/arm64: Do not add CPU to node_to_cpumask_map in acpi_map_cpu()
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- x86/amd_nb: Get DF ID for Hygon family 18h model 7h
- mm/ksm: fix possible UAF of stable_node</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
</package>
<package pkgid="b63911c3b61f58b219b9630c73e6153dde8e9cd6cee8da4142c2a9d5f2e6e5c2" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="242.0.0.141.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-233.0.0.132" date="1729684800">- !12315 perf pmu: resolve CPU map for "cpu" PMUs
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- !12072 sdma-dae: fix possible mremap error
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- Revert "perf cpumap: Add is_subset function"
- Revert "perf cpumap: Add intersect function"
- Revert "perf pmu: Add CPU map for "cpu" PMUs"
- Revert "perf arm: Workaround ARM PMUs cpu maps having offline cpus"
- !12298  CVE-2024-46822
- drivers:misc:sdma-dae: add vma_ops to avoid mremap error
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- !12261  drm/lima: fix a memleak in lima_heap_alloc
- !12262  media: go7007: fix a memleak in go7007_load_encoder
- !12257  octeontx2-af: Use separate handlers for interrupts
- !12264  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12244 v2  net/mlx5e: Fix netif state handling
- !12245 v2  netfilter: nf_tables: use timestamp to check for set element timeout
- media: go7007: fix a memleak in go7007_load_encoder
- drm/lima: fix a memleak in lima_heap_alloc
- octeontx2-af: Use separate handlers for interrupts
- !12254  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12164 Backport 5.10.218 LTS patches from upstream
- greybus: Fix use-after-free bug in gb_interface_release due to race condition.
- !12155  bonding: Fix CVE-2024-44990
- !12153  bonding: fix xfrm real_dev null pointer dereference
- !12250  xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !11299  gpio: prevent potential speculation leaks in gpio_device_get_desc()
- xfs: atomic write file dio convert to mark IOCB_ATOMIC
- !12115  md/raid1: don't free conf on raid0_run failure
- !12234  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12236  dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- netfilter: nf_tables: use timestamp to check for set element timeout
- net/mlx5e: Fix netif state handling
- !12185  mlxsw: spectrum_acl_erp: Fix object nesting warning
- !12182  netns: Make get_net_ns() handle zero refcount net
- !12179  net/sched: Fix CVE-2024-36244
- !12176  ipv6: sr: fix invalid unregister error path
- !12186 v2  ipv4: Fix uninit-value access in __ip_make_skb()
- !12197  net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- !12213  scsi: qla2xxx: During vport delete send async logout explicitly
- !12212  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12227  nbd: Fix signal handling
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- !12208  Some bugfixs for ubi/fs
- nbd: Fix signal handling
- nbd: Improve the documentation of the locking assumptions
- !11910  ext4: dax: Fix inconsistent isize during writing
- !12075  blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- !12162 【OLK-5.10】Workaround ARM PMUs cpu maps having offline cpus
- scsi: qla2xxx: During vport delete send async logout explicitly
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- locks: fix TOCTOU race when granting write lease
- ubi: block: fix null-pointer-dereference in ubiblock_create()
- ubi: block: Remove in vain semicolon
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix uninit-value access in __ip_make_skb()
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- netns: Make get_net_ns() handle zero refcount net
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- ipv6: sr: fix invalid unregister error path
- docs: kernel_include.py: Cope with docutils 0.21
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- usb: typec: ucsi: displayport: Fix potential deadlock
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
- KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
- netlink: annotate lockless accesses to nlk-&gt;max_recvmsg_len
- net: bcmgenet: synchronize UMAC_CMD access
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
- perf arm: Workaround ARM PMUs cpu maps having offline cpus
- perf pmu: Add CPU map for "cpu" PMUs
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix xfrm real_dev null pointer dereference
- perf cpumap: Add intersect function
- perf cpumap: Add is_subset function
- md/raid1: don't free conf on raid0_run failure
- blk-mq: fix lockdep hardirq warning in __blk_mq_tag_idle()
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- gpio: prevent potential speculation leaks in gpio_device_get_desc()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
</package>
<package pkgid="f0e9af794748322192950cdef761f1ae3e635cd4e8fe754cd3d106beeb3ff271" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="243.0.0.142.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-234.0.0.133" date="1730289600">- !12672  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12670  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12248  nilfs2: fix state management in error path of log writing function
- !12641  tcp: check skb is non-NULL in tcp_rto_delta_us()
- !12640  sock_map: Add a cond_resched() in sock_hash_free()
- !12642  RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- !12639  net: do not delay dst_entries_add() in dst_release()
- !12621  apparmor: fix policy_unpack_test on big endian systems
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !12275  blk-mq: fix blk_mq_hw_ctx active request accounting
- !12611  drm/amd/display: Check null pointer before dereferencing se
- !12596  scsi: fnic: Move flush_work initialization out of if block
- !12505  ocfs2: cancel dqi_sync_work before freeing oinfo
- !12615  writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !12620  PCI: mt7621: Add sentinel to quirks table
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- sock_map: Add a cond_resched() in sock_hash_free()
- net: do not delay dst_entries_add() in dst_release()
- !12556  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- apparmor: fix policy_unpack_test on big endian systems
- !12571 v2  Randomized Kmalloc 5.10 Backport V2
- PCI: mt7621: Add sentinel to quirks table
- !12109 [OLK-5.10] mptcp: pm: only decrement add_addr_accepted for MPJ req
- !12605  fix CVE-2024-46802
- !12445  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- init: Initialize noop_backing_dev_info early
- writeback: Fix inode-&gt;i_io_list not be protected by inode-&gt;i_lock error
- !8925  ext4: avoid deadlock in fs reclaim with page writeback
- drm/amd/display: Check null pointer before dereferencing se
- !12466  drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12581  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12460  NFSD: Limit the number of concurrent async COPY operations
- !12560  fix CVE-2024-49900
- !12569  fix CVE-2024-47667
- drm/amd/display: fix mixed declarations warning
- drm/amd/display: added NULL check at start of dc_validate_stream
- !12459  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12453  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12442  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- scsi: fnic: Move flush_work initialization out of if block
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12402  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- Randomized slab caches for kmalloc()
- mm/slab: introduce kmem_cache flag SLAB_NO_MERGE
- !12536  kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- !12424  jfs: check if leafidx greater than num leaves per dmap tree
- !12425  jfs: Fix uaf in dbFreeBits
- !12422  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12423  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12523  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- !12542  media: pci: cx23885: check cx23885_vdev_init() return
- jfs: Fix uninit-value access of new_ea in ea_buffer
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12369  x86/ioapic: Handle allocation failures gracefully
- media: pci: cx23885: check cx23885_vdev_init() return
- kabi: use CONFIG_KABI_RESERVE to control reservation in ucount_type and user_table
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12511  jfs: Fix array-index-out-of-bounds in diFree
- !12510  devres: Fix memory leakage caused by driver API devm_free_percpu()
- !12509  exfat: fix potential deadlock on __exfat_get_dentry_set
- !12252  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !12387  spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- !12385  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- !12382  fix CVE-2024-46675
- !12360  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12451  iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- !12467  fix CVE-2024-42301
- !12310  fix CVE-2024-40965
- !12484  CVE-2024-38667
- !12480  CVE-2024-36286
- !12454  soundwire: cadence: fix invalid PDI offset
- jfs: Fix array-index-out-of-bounds in diFree
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- exfat: fix potential deadlock on __exfat_get_dentry_set
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12411  CVE-2024-43894
- riscv: prevent pt_regs corruption for secondary idle threads
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
- !12391  mm/swapfile: skip HugeTLB pages for unuse_vma
- !12350  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- parport: Proper fix for array out-of-bounds access
- dev/parport: fix the array out-of-bounds risk
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- NFSD: Limit the number of concurrent async COPY operations
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- soundwire: cadence: fix invalid PDI offset
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12272  drm/amdgpu: fix mc_data out-of-bounds read warning
- !12395  tracing/timerlat: Fix a race during cpuhp processing
- !12406  fix CVE-2024-43841
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- wifi: virt_wifi: don't use strlen() in const context
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- tracing/timerlat: Fix a race during cpuhp processing
- mm/swapfile: skip HugeTLB pages for unuse_vma
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: core: Skip setting event buffers for host only controllers
- !12349  neighbour: fix data-races around n-&gt;output
- !12294  nfsd: return -EINVAL when namelen is 0
- x86/ioapic: Handle allocation failures gracefully
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- !12318  nfsd: call cache_put if xdr_reserve_space returns NULL
- !12344  of: module: prevent NULL pointer dereference in vsnprintf()
- !12342  nvmet: fix a possible leak when destroy a ctrl during qp establishment
- !12334  drm/nouveau: prime: fix refcount underflow
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- neighbour: fix data-races around n-&gt;output
- !12336  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12305  soc: qcom: cmd-db: Map shared memory as WC, not WB
- !12332 hns3 udma: delete irrl and trrl table
- of: module: prevent NULL pointer dereference in vsnprintf()
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- hns3 udma: delete irrl and trrl table.
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- drm/nouveau: prime: fix refcount underflow
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- nfsd: call cache_put if xdr_reserve_space returns NULL
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- i2c: imx-lpi2c: return -EINVAL when i2c peripheral clk doesn't work
- i2c: imx-lpi2c: use bulk clk API
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfsd: return -EINVAL when namelen is 0
- blk-mq: fix blk_mq_hw_ctx active request accounting
- drm/amdgpu: fix mc_data out-of-bounds read warning
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- nilfs2: fix state management in error path of log writing function
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- ext4: avoid deadlock in fs reclaim with page writeback</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
</package>
<package pkgid="1dc5d0fac501e08a44d19cdbf1d950a69fd344e0fb5bace17f6a0594f414a0c5" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="244.0.0.143.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-235.0.0.134" date="1730808000">- !13009  CVE-2024-49950
- !12984 [OLK-5.10] Backport scsi bugfix and cleancode from upstream
- !13003  CVE-2024-50064
- !13051  ext4: fix CVE-2024-47701
- !12680  smb: client: fix UAF in async decryption
- !13039  static_call: Handle module init failure correctly in static_call_del_module()
- !13017  f2fs: fix to wait dio completion
- !13016  f2fs: fix to check atomic_file in f2fs ioctl interfaces
- !13015  drm/amd/display: Check stream before comparing them
- !13019  l2tp: prevent possible tunnel refcount underflow
- !13022  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: return error on ext4_find_inline_entry
- ext4: ext4_search_dir should return a proper error
- !13034  efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- !12992  igb: Do not bring the device up after non-fatal error
- !12994  drm/amd/display: Check BIOS images before it is used
- !12878 UNIC: Eliminate compile warnings when the option CONFIG_HNS3_UBL is not set
- !12901  ext4: fix double brelse() the buffer of the extents path
- !12897  ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12958  ext4: update orig_path in ext4_find_extent()
- static_call: Handle module init failure correctly in static_call_del_module()
- !12449  scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- l2tp: prevent possible tunnel refcount underflow
- f2fs: fix to wait dio completion
- !12884  CVE-2024-50016
- !12844  ACPI: sysfs: validate return type of _STR method
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- drm/amd/display: Check stream before comparing them
- !12998  f2fs: get rid of online repaire on corrupted directory
- !12911  fsnotify: fix CVE-2024-47660
- !12908  io_uring: fix CVE-2024-50060
- !12879  drm/stm: Avoid use-after-free issues with crtc and plane
- !12915  CVE-2022-48961
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: Return whether a connection is outbound
- !12944  fix CVE-2024-47723
- !12950  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12954  memcg_write_event_control(): fix a user-triggerable oops
- !12824  f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- !12548  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12870  Fix CVE-2024-47703
- !12893  ext4: avoid use-after-free in ext4_ext_show_leaf()
- zram: don't free statically defined names
- zram: free secondary algorithms names
- [Backport]scsi: libsas: Fix disk not being scanned in after being removed
- [Backport]scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- f2fs: get rid of online repaire on corrupted directory
- [Backport]scsi: libsas: Introduce struct smp_disc_resp
- !12934  gpiolib: fix memory leak in gpiochip_setup_dev()
- !12686  security/keys: fix slab-out-of-bounds in key_task_permission
- drm/amd/display: Check BIOS images before it is used
- igb: Do not bring the device up after non-fatal error
- !12831  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12689  ocfs2: reserve space for inline xattr before attaching reflink tree
- !12920  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12890  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12875  tipc: guard against string buffer overrun
- ext4: update orig_path in ext4_find_extent()
- memcg_write_event_control(): fix a user-triggerable oops
- !12781  uprobes: fix kernel info leak via "[uprobes
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12928  tcp: fix mptcp DSS corruption due to large pmtu xmit
- jfs: Fix sanity check in dbMount
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- !12926  gso: fix udp gso fraglist segmentation after pull from frag_list
- !12927  RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gpiolib: fix memory leak in gpiochip_setup_dev()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12812  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12790  slip: make slhc_remember() more robust against malicious packets
- !12801  ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12737  r8169: add tally counter fields added with RTL8125
- !12741  net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12407  padata: use integer wrap around to prevent deadlock on seq_nr overflow
- !12778  riscv: Sync efi page table's kernel mappings before switching
- !12867  hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: mdio: use device_set_node() to setup both fwnode and of
- fsnotify: clear PARENT_WATCHED flags lazily
- fsnotify: remove unused declaration
- fsnotify: Fix comment typo
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- UNIC: Eliminate compile warnings
- drm/stm: Avoid use-after-free issues with crtc and plane
- tipc: guard against string buffer overrun
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- hisilicon/hisi_hbmdev: prevent NULL pointer dereference when corrently
- !12525  powercap: intel_rapl: Fix off by one in get_rpi()
- !12818  media: venus: fix use after free bug in venus_remove due to race condition
- !12825  drm/amd/display: Check null pointers before using them
- !12798  uprobe: avoid out-of-bounds memory access of fetching args
- ACPI: sysfs: validate return type of _STR method
- !12764  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12658  nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- !12794  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12754  CVE-2024-50063
- !12488  gtp: fix a potential NULL pointer dereference
- !12762  smack: tcp: ipv4, fix incorrect labeling
- drm/amd/display: Check null pointers before using them
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- media: venus: fix use after free bug in venus_remove due to race condition
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12758  selinux: add the processing of the failure of avc_add_xperms_decision()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- uprobe: avoid out-of-bounds memory access of fetching args
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12770 v2  hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- slip: make slhc_remember() more robust against malicious packets
- uprobes: fix kernel info leak via "[uprobes]" vma
- riscv: Sync efi page table's kernel mappings before switching
- hisilicon/hisi_hbmcache: Use mutex_trylock to prevent hung task
- !12551  cifs: Fix buffer overflow when parsing NFS reparse points
- !12713  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12723  ppp: fix ppp_async_encode() illegal access
- smack: tcp: ipv4, fix incorrect labeling
- !12733  CVE-2024-50059
- !12373  fix CVE-2024-49954
- !12705  fix CVE-2024-49924
- !12517  fix CVE-2024-47742
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selftests/bpf: Add test for lsm tail call
- bpf: Prevent tail call between progs attached to different hooks
- !12665 v2  CVE-2024-49955
- !12685  block: fix potential invalid pointer dereference in blk_add_partition
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12697  mm: memcg: don't periodically flush stats when memcg is disabled
- !12694  crypto: xor - fix template benchmarking
- !12701  vhost_vdpa: assign irq bypass producer token correctly
- r8169: add tally counter fields added with RTL8125
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- ppp: fix ppp_async_encode() illegal access
- !12678  CVE-2024-47673
- !12676  IB/core: Fix ib_cache_setup_one error flow cleanup
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- vhost_vdpa: assign irq bypass producer token correctly
- !12629  blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- !12667  randomize_kstack: Improve entropy diffusion
- !12668  selinux: fix potential counting error in avc_add_xperms_decision()
- !12499  nbd: fix race between timeout and normal completion
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12610  blk_iocost: fix more out of bound shifts
- crypto: xor - fix template benchmarking
- crypto: xor - Fix typo of optimization
- !12633  ALSA: asihpi: Fix potential OOB array access
- !12354 Backport important bugfix from the kernel-5.10.y
- ocfs2: reserve space for inline xattr before attaching reflink tree
- security/keys: fix slab-out-of-bounds in key_task_permission
- block: fix potential invalid pointer dereference in blk_add_partition
- smb: client: fix UAF in async decryption
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- iwlwifi: mvm: move iwl_mvm_stop_device() out of line
- IB/core: Fix ib_cache_setup_one error flow cleanup
- selinux: fix potential counting error in avc_add_xperms_decision()
- randomize_kstack: Improve entropy diffusion
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- ALSA: asihpi: Fix potential OOB array access
- blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
- blk_iocost: fix more out of bound shifts
- cifs: Fix buffer overflow when parsing NFS reparse points
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- powercap: intel_rapl: Fix off by one in get_rpi()
- firmware_loader: Block path traversal
- nbd: fix race between timeout and normal completion
- gtp: fix a potential NULL pointer dereference
- scsi: fix kabi broken
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- scsi: mpt3sas: Remove scsi_dma_map() error messages</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
</package>
<package pkgid="9cb7c38e6da2c9bf5b4dbd785f36b8ea08f942b01642968a6c553aa741e85cef" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="245.0.0.144.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-236.0.0.135" date="1731499200">- !13186  virtio_pmem: Check device status before requesting flush
- !13156  tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- !13157  xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- !13154  RDMA/mad: Improve handling of timed out WRs of mad agent
- !13146  arm64: probes: Remove broken LDR (literal) uprobe support
- !13167  CVE-2024-50133
- !13173  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13164  Fix 'cgroup/cpuset: Prevent UAF in proc_cpuset_show()' issue with commmunity patches
- !13182  arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- virtio_pmem: Check device status before requesting flush
- arm64: restore pc after fixup iff mcs failed in arm64_do_kernel_sea
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13095 Update ASPM sysfs on MFD function removal to avoid use-after-free
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- cgroup: add cgroup_root_ext to keep kabi
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- cgroup: Make operations on the cgroup root_list RCU safe
- Revert "cgroup: fix uaf when proc_cpuset_show"
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- RDMA/mad: Improve handling of timed out WRs of mad agent
- !13124  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13144 v2  tracing: Consider the NULL character when validating the event length
- arm64: probes: Remove broken LDR (literal) uprobe support
- tracing: Consider the NULL character when validating the event length
- !13125 v7  mm: support poison recover for more
- mm/hugetlb: add missing VM_FAULT_SET_HINDEX in hugetlb_wp
- arm64: send sig fault for user task when apei_claim_sea fails
- arm64: mm: Add copy mc support for all migrate_page
- mm: support poison recovery from do_cow_fault()
- mm: support poison recovery from copy_present_page()
- mm: hwpoison: support recovery from HugePage copy-on-write faults
- make copy_[user]_highpage_mc have return value
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !12974  ext4: fix timer use-after-free on failed mount
- !12976  : ext4: no need to continue when the number of entries is 1
- !12971  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12975  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12970  exfat: fix memory leak in exfat_load_bitmap()
- !12972  ext4: fix access to uninitialised lock in fc replay path
- !13094  RDMA/hns: Fix DCA mmap area PUAF
- !12973  vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !13089  bpf, net: Fix a potential race in do_sock_getsockopt()
- !13101  thunderbolt: Mark XDomain as unplugged when router is removed
- !13099  pinctrl: single: fix potential NULL dereference in pcs_get_function()
- !13103  CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
- thunderbolt: Mark XDomain as unplugged when router is removed
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- RDMA/hns: Fix DCA mmap area PUAF
- !12587 network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13067  Fix UAF of rpc_task
- bpf, net: Fix a potential race in do_sock_getsockopt()
- !13042  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !12996 【OLK-5.10】Support SMT control on arm64
- network_mgmt: Change print_ip_notify_pkt_en sysfs_attr priority
- !13055  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- !13054  net: add more sanity checks to qdisc_pkt_len_init()
- !13048 sdma-dae: add ida validation
- !12949  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- drivers:misc:sdma-dae: add channel ida validation
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- config: enable CONFIG_HOTPLUG_SMT for arm64
- arm64: Kconfig: Enable HOTPLUG_SMT
- arm64: topology: Support SMT control on ACPI based system
- arch_topology: Support SMT control for OF based system
- arch_topology: Support basic SMT control for the driver
- cpu/SMT: Store the current/max number of threads
- cpu/SMT: Move SMT prototypes into cpu_smt.h
- ext4: no need to continue when the number of entries is 1
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix timer use-after-free on failed mount
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- exfat: fix memory leak in exfat_load_bitmap()
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
</package>
<package pkgid="24ad3dd53baa1eff3d48da22bb99867df44bcbe3d788a0fcf681d6fc9ebfd882" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="246.0.0.145.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-237.0.0.136" date="1732104000">- !13310  fs/ntfs3: Additional check in ni_clear()
- !13343 [sync] PR-13339:  smb: client: fix OOBs when building SMB2_IOCTL request
- !13344  mm,hwpoison: check mm when killing accessing process
- mm,hwpoison: check mm when killing accessing process
- smb: client: fix OOBs when building SMB2_IOCTL request
- !13318 Fix objtool error for AMX instruction decoding
- !13196  fs/ntfs3: Additional check in ntfs_file_release
- !13260  scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- !13013 [OLK-5.10] Intel: Backport KVM Fix for Clearing SGX EDECCSSA to OLK-5.10
- !13328  bpf: Fix out-of-bounds write in trie_get_next_key()
- !13285  wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- bpf: Fix out-of-bounds write in trie_get_next_key()
- !11286 [OLK-5.10] Backport Intel Trace Hub support on GNR and SPR platforms
- !13280 [OLK-5.10]Intel: Backport to fix In Field Scan(IFS) Scan At Field(SAF)
- !13276  mailbox: bcm2835: Fix timeout during suspend mode
- !13294 sdma-dae: change authority of debugfs
- x86/insn: Add AMX instructions to the x86 instruction decoder
- !13277  CVE-2023-52920
- fs/ntfs3: Additional check in ni_clear()
- !13227  fs/ntfs3: Add rough attr alloc_size check
- !13225  fs/ntfs3: Check if more than chunk-size bytes are written
- !13226  fs/ntfs3: Fix possible deadlock in mi_read
- !13299  bpf, arm64: Fix address emission with tag-based KASAN enabled
- !13190  net/ncsi: Disable the ncsi work before freeing the associated structure
- !13194  fix CVE-2024-50115
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- driver:misc:sdma:change authority of sdma device
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- !13178  bpf: Use raw_spinlock_t in ringbuf
- bpf: handle fake register spill to stack with BPF_ST_MEM instruction
- bpf: support non-r10 register spill/fill to/from stack in precision tracking
- bpf: mostly decouple jump history management from is_state_visited()
- bpf: encapsulate precision backtracking bookkeeping
- bpf: decouple prune and jump points
- mailbox: bcm2835: Fix timeout during suspend mode
- !13261  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- platform/x86/intel/ifs: release cpus_read_lock()
- platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain
- tools arch x86: Sync the msr-index.h copy with the kernel sources
- !13221  aoe: fix the potential use-after-free problem in more places
- !13239  scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- !13237  staging: iio: frequency: ad9834: Validate frequency parameter value
- !13255  RDMA/hns: Fix the valid QP bank set to improve performance
- RDMA/hns: Fix the valid QP bank set to improve performance
- !12858 intel: backport GNR and SRF intel_idle fix for 5.10
- !12154 v2  netfilter: flowtable: initialise extack before use
- !12375  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- staging: iio: frequency: ad9834: Validate frequency parameter value
- !13201  iio: light: veml6030: fix IIO device retrieval from embedded device
- !13212 v7  arm64: support page mapping percpu first chunk allocator
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Check if more than chunk-size bytes are written
- aoe: fix the potential use-after-free problem in more places
- !13080  serial: core: Fix atomicity violation in uart_tiocmget
- !13073  selinux: clarify return code in filename_trans_read_helper_compat()
- !13128  drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC
- arm64: support page mapping percpu first chunk allocator
- vmalloc: choose a better start address in vm_area_register_early()
- iio: light: veml6030: fix IIO device retrieval from embedded device
- fs/ntfs3: Additional check in ntfs_file_release
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bpf: Use raw_spinlock_t in ringbuf
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*
- drm/amd/display: Add null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- serial: core: Fix atomicity violation in uart_tiocmget
- selinux: clarify return code in filename_trans_read_helper_compat()
- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state
- intel_idle: Add a new flag to initialize the AMX state
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- netfilter: flowtable: initialise extack before use
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Granite Rapids support</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
</package>
<package pkgid="9907bae209ed3e6c0750c9e87f812635c674aea27f12663c87267fb3d9ac0834" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="247.0.0.146.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-238.0.0.137" date="1732708800">- !13813  nilfs2: fix kernel bug due to missing clearing of checked flag
- !13458  io_uring: fix CVE-2024-53052
- !13462  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- !13398 [sync] PR-13342:  ntfs3: fix CVE-2024-50248
- !13397 [sync] PR-13348:  ceph: remove the incorrect Fw reference check when dirtying pages
- !13396 [sync] PR-13347:  nilfs2: propagate directory read errors from nilfs_find_entry()
- !13829  fix CVE-2024-50192
- !13414  sched/topology: Prevent race condition in sched_domain topology
- !13411  udf: fix uninit-value use in udf_get_fileshortad
- !13800  media: av7110: fix a spectre vulnerability
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- !13823 [HNS3]Add the reliability check of guid_tbl_space
- !13448 bugfix of nfs
- !13403 some bugfix of ksmbd smb2_open()
- HNS3: Add the reliability check of guid_tbl_space.
- !13418  btrfs: reinitialize delayed ref list after deleting it from the list
- !13421  nfs: Fix KMSAN warning in decode_getfattr_attrs()
- !13419  media: s5p-jpeg: prevent buffer overflows
- nilfs2: fix kernel bug due to missing clearing of checked flag
- !13793  nilfs2: fix potential deadlock with newly created symlinks
- !13386 [sync] PR-13304:  ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- !13797  drm/amd/display: Initialize denominators' default to 1
- !13792  CVE-2024-43817
- media: av7110: fix a spectre vulnerability
- drm/amd/display: Initialize denominators' default to 1
- !13281 【OLK 5.10】RDMA/hns backport some bugfix from mainline linux
- !13439  net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- !13436  netfilter: br_netfilter: fix panic with metadata_dst skb
- !13435  netfilter: nf_tables: prevent nf_skb_duplicated corruption
- !13433  wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nilfs2: fix potential deadlock with newly created symlinks
- !13319  unicode: Don't special case ignorable code points
- net: tighten bad gso csum offset check in virtio_net_hdr
- udp: fix receiving fraglist GSO packets
- net: drop bad gso csum_start and offset in virtio_net_hdr
- gso: fix dodgy bit handling for GSO_UDP_L4
- !13379  fbdev: sisfb: Fix strbuf array overflow
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- io_uring: use kiocb_{start,end}_write() helpers
- fs: create kiocb_{start,end}_write() helpers
- io_uring: rename kiocb_end_write() local helper
- !13441  RDMA/cxgb4: Added NULL check for lookup_atid
- !13444  RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- !13356  NFSD: Initialize struct nfsd4_copy earlier
- NFSv4: check FMODE_EXEC from open context mode in nfs4_opendata_access()
- NFS: make sure open context mode have FMODE_EXEC when file open for exec
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- RDMA/cxgb4: Added NULL check for lookup_atid
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- netfilter: br_netfilter: fix panic with metadata_dst skb
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- media: s5p-jpeg: prevent buffer overflows
- btrfs: reinitialize delayed ref list after deleting it from the list
- sched/topology: Prevent race condition in sched_domain topology
- udf: fix uninit-value use in udf_get_fileshortad
- ksmbd: fix return value of smb2_open()
- !13303 v2  fix CVE-2024-50141
- !13387  usb: musb: sunxi: Fix accessing an released usb phy
- ksmbd: fix possible refcount leak in smb2_open()
- !13392  CVE-2024-47745
- !13371  CVE-2024-46713
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ntfs3: Add bounds checking to mi_enum_attr()
- ceph: remove the incorrect Fw reference check when dirtying pages
- nilfs2: propagate directory read errors from nilfs_find_entry()
- mm: split critical region in remap_file_pages() and invoke LSMs in between
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- remap_file_pages: Use vma_lookup() instead of find_vma()
- mm/mmap.c: don't unlock VMAs in remap_file_pages()
- usb: musb: sunxi: Fix accessing an released usb phy
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: sisfb: Fix strbuf array overflow
- !13323 [sync] PR-13302:  CVE-2024-50195
- perf: Fix kabi problem by put mutex in front of perf_buffer
- perf/aux: Fix AUX buffer serialization
- NFSD: Initialize struct nfsd4_copy earlier
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- unicode: Don't special case ignorable code points
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and domain_id string
- erofs: protect s_inodes with s_inode_list_lock for fscache
- erofs: introduce 'domain_id' mount option
- erofs: Support sharing cookies in the same domain
- erofs: introduce a pseudo mnt to manage shared cookies
- erofs: introduce fscache-based domain
- erofs: code clean up for fscache
- anolis: erofs: implement fscache-based data readahead
- anolis: fscache,cachefiles: add fscache_prepare_read() helper
- anolis: cachefiles: maintain a file descriptor to the backing file
- erofs: leave compressed inodes unsupported in fscache mode for now
- anolis: erofs: fix the name of erofs_fscache_super_index_def
- erofs: use kill_anon_super() to kill super in fscache mode
- erofs: scan devices from device table
- erofs: add 'fsid' mount option
- erofs: implement fscache-based data read for inline layout
- erofs: implement fscache-based data read for non-inline layout
- erofs: implement fscache-based metadata read
- erofs: register fscache context for extra data blobs
- erofs: register fscache context for primary data blob
- erofs: add anonymous inode caching metadata for data blobs
- erofs: add fscache context helper functions
- erofs: register fscache volume
- erofs: add fscache mode check helper
- erofs: make erofs_map_blocks() generally available
- cachefiles: make on-demand request distribution fairer
- anolis: cachefiles: refactor cachefiles_ondemand_daemon_read()
- cachefiles: fix error return code in cachefiles_ondemand_copen()
- anolis: cachefiles: fix volume key setup for cachefiles_open
- anolis: cachefiles: replace BUG_ON() with WARN_ON()
- cachefiles: narrow the scope of flushed requests when releasing fd
- anolis: cachefiles: skip check for n_children in on-demand mode
- cachefiles: enable on-demand read mode
- cachefiles: implement on-demand read
- cachefiles: notify the user daemon when withdrawing cookie
- cachefiles: unbind cachefiles gracefully in on-demand mode
- cachefiles: notify the user daemon when looking up cookie
- erofs: fix misbehavior of unsupported chunk format check
- erofs: use meta buffers for erofs_read_superblock()
- erofs: use meta buffers for zmap operations
- erofs: use meta buffers for xattr operations
- erofs: use meta buffers for super operations
- erofs: use meta buffers for inode operations
- erofs: introduce meta buffer operations
- erofs: clean up erofs_map_blocks tracepoints
- erofs: add multiple device support
- erofs: decouple basic mount options from fs_context
- erofs: introduce erofs_sb_has_xxx() helpers
- erofs: fix double free of 'copied'
- erofs: support reading chunk-based uncompressed files
- erofs: introduce chunk-based file on-disk format
- erofs: clean up file headers &amp; footers
- erofs: don't use erofs_map_blocks() any more
- [Backport]scsi: hisi_sas: Enable force phy when SATA disk directly connected
- [Backport]scsi: hisi_sas: Add latest_dump for the debugfs dump
- [Backport]scsi: hisi_sas: Create all dump files during debugfs initialization
- [Backport]scsi: hisi_sas: Update v3 hw STP_LINK_TIMER setting
- [Backport]scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec
- [Backport]scsi: hisi_sas: Update disk locked timeout to 7 seconds
- [Backport]scsi: hisi_sas: Reset PHY again if phyup timeout
- [Backport]scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset
- [Backport]scsi: hisi_sas: Add firmware information check
- [Backport]scsi: hisi_sas: Create trigger_dump at the end of the debugfs initialization
- [Backport]scsi: hisi_sas: Adjust priority of registering and exiting debugfs for security
- iomap: fix zero padding data issue in concurrent append writes
- xfs: handle attr node/leaf blocks atomically during inactive
- xfs: factor out xfs_attr3_leaf_init
- xfs: factor out xfs_da3_node_entry_remove
- perf addr_location: Add init/exit/copy functions
- perf maps: Use a pointer for kmaps
- ksmbd: fix user-after-free from session log off
- ksmbd: fix race condition between session lookup and expire</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-245.0.0.144" date="1736337600">- !14742  rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14751  mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- !14679  drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- !14572  PCI: Fix use-after-free of slot-&gt;bus on hot remove
- !14758  media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- !14755  i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14777  tracing: Prevent bad count for tracing_cpumask_write
- !14496  ovl: Filter invalid inodes with missing lookup function
- !14497  nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- !14498  f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- !14495  ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- !14606  scsi: qla2xxx: Fix use after free on unload
- !14579  io_uring: check for overflows in io_pin_pages
- !14530  sched/deadline: Fix warning in migrate_enable for boosted tasks
- !14526  drm/amdgpu: set the right AMDGPU sg segment limitation
- !14734  Fix iBMA bug and change version
- !14713  Fix CVE-2024-56705
- tracing: Prevent bad count for tracing_cpumask_write
- !14604  scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- !14601  nvme-pci: fix freeing of the HMB descriptor table
- !14575  etmem: fix use-after-free of mm in the scan release process
- !14381  virtiofs: use pages instead of pointer for kernel direct IO
- !14668  Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14209  gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- !14651  backport mainline bugfix patch
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
- !14629  net/mlx5: Fix error path in multi-packet WQE transmit
- !14627  crypto: hisilicon/qm - inject error before stopping queue
- !14626  drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- !14623  staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- !14598  blk-cgroup: Fix UAF in blkcg_unpin_online()
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- !14704  bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- BMA: Fix Oops and spin lock deadlock problem, and change the version number.
- !14700  CVE-2024-53158
- !14457  cgroup: Fix potential overflow issue when checking max_depth
- !14620  drm: zynqmp_kms: Unplug DRM device before removal
- !14616  scsi: sg: Fix slab-use-after-free read in sg_release()
- media: atomisp: Add check for rgby_data memory allocation failure
- media: atomisp: remove #ifdef HAS_NO_HMEM
- !14456  f2fs: fix race in concurrent f2fs_stop_gc_thread
- !14481  jfs: fix array-index-out-of-bounds in jfs_readdir
- !14470  ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- !14440  sh: intc: Fix use-after-free bug in register_intc_controller()
- !14535  RDMA/mlx5: Move events notifier registration to be after device registration
- !14450  apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14636  CVE-2024-56604_OLK-5.10
- !14547  media: wl128x: Fix atomicity violation in fmc_send_cmd()
- !14563  f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14460  sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- !14523  The bugfix for LPM trie
- !14650  memcg: fix soft lockup in the OOM process
- drm/amd/display: Fix null check for pipe_ctx-&gt;plane_state in dcn20_program_pipe
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()
- !14436  crypto: bcm - add error check in the ahash_hmac_init function
- genirq/msi: Fix off-by-one error in msi_domain_alloc()
- memcg: fix soft lockup in the OOM process
- !14473  smb: client: fix NULL ptr deref in crypto_aead_setkey()
- !14467  io_uring/tctx: work around xa_store() allocation error issue
- !14503  net: phy: dp83869: fix memory corruption when enabling fiber
- !14515  hfsplus: don't query the device logical block size multiple times
- !14513  scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- !14512  f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14388  CVE-2024-53173
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
- Bluetooth: Consolidate code around sk_alloc into a helper function
- net/mlx5: Fix error path in multi-packet WQE transmit
- crypto: hisilicon/qm - inject error before stopping queue
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- drm: zynqmp_kms: Unplug DRM device before removal
- scsi: sg: Fix slab-use-after-free read in sg_release()
- scsi: qla2xxx: Fix use after free on unload
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- nvme-pci: fix freeing of the HMB descriptor table
- blk-cgroup: Fix UAF in blkcg_unpin_online()
- io_uring: check for overflows in io_pin_pages
- etmem: fix use-after-free of mm in the scan release process
- PCI: Fix use-after-free of slot-&gt;bus on hot remove
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- !14366  EDAC/bluefield: Fix potential integer overflow
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- RDMA/mlx5: Move events notifier registration to be after device registration
- sched/deadline: Fix warning in migrate_enable for boosted tasks
- drm/amdgpu: set the right AMDGPU sg segment limitation
- !14380  io_uring: check if iowq is killed before queuing
- !14354  btrfs: ref-verify: fix use-after-free after invalid ref action
- !14351  jfs: array-index-out-of-bounds fix in dtReadFirst
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- !14344  drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- hfsplus: don't query the device logical block size multiple times
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- !14371 [OLK-5.10] update AMD Zen5 Turin feature
- net: phy: dp83869: fix memory corruption when enabling fiber
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- ovl: Filter invalid inodes with missing lookup function
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- jfs: fix array-index-out-of-bounds in jfs_readdir
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- io_uring/tctx: work around xa_store() allocation error issue
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- cgroup: Fix potential overflow issue when checking max_depth
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- !14409  bpf: fix OOB devmap writes when deleting elements
- !14419  HID: wacom: fix when get product name maybe null pointer
- sh: intc: Fix use-after-free bug in register_intc_controller()
- crypto: bcm - add error check in the ahash_hmac_init function
- !14268  Revert "unicode: Don't special case ignorable code points"
- !14397  backport some patches from upstream about HCCS low power
- !14392  arm64: stacktrace: Handle 'lr' in interrupt context
- !14317  exfat: fix out-of-bounds access of directory entries
- !14402  gpio: grgpio: Add NULL check in grgpio_probe
- !14396  scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- !14363  CVE-2024-53217
- HID: wacom: fix when get product name maybe null pointer
- !14097  vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- !14407  NFSD: Prevent a potential integer overflow
- !14378  ftrace: Fix regression with module command in stack_trace_filter
- bpf: fix OOB devmap writes when deleting elements
- !14375  fix CVE-2024-53197
- NFSD: Prevent a potential integer overflow
- gpio: grgpio: Add NULL check in grgpio_probe
- soc: hisilicon: kunpeng_hccs: Support low power feature for the specified HCCS type
- soc: hisilicon: kunpeng_hccs: Add used HCCS types sysfs
- soc: hisilicon: kunpeng_hccs: Fix the 'lane_mode' field name in port info structure to 'max_lane_num'
- soc: hisilicon: kunpeng_hccs: Add the check for base address and size of shared memory
- soc: hisilicon: kunpeng_hccs: Return failure on having not die or port information
- soc: hisilicon: kunpeng_hccs: Fix a PCC typo
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- arm64: stacktrace: Handle 'lr' in interrupt context
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- NFSv4.0: Fix the wake up of the next waiter in nfs_release_seqid()
- Revert "NFSv4: release seqid when open failed for nfs4.0"
- Revert "nfs: fix rpc_task use-after-free when open and close different files concurrently"
- virtiofs: use pages instead of pointer for kernel direct IO
- io_uring: check if iowq is killed before queuing
- ftrace: Fix regression with module command in stack_trace_filter
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- EDAC/bluefield: Fix potential integer overflow
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- btrfs: ref-verify: fix use-after-free after invalid ref action
- jfs: array-index-out-of-bounds fix in dtReadFirst
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
- exfat: fix out-of-bounds access of directory entries
- Revert "unicode: Don't special case ignorable code points"
- gpiolib: fix memory use-after-free in gpiochip_setup_dev()
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-246.0.0.145" date="1736942400">- !14844  merge mainline patch into OLK-5.10
- !14838 v2  fs: Filter specific inodes to prevent UAF issues
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- mm: kfence: fix using kfence_metadata without initialization in show_object()
- x86/mm: Do not shuffle CPU entry areas without KASLR
- fs: Filter specific inodes to prevent UAF issues
- !14599  CVE-2024-56701
- !14560  CVE-2024-56567
- !14801  CVE-2024-53237
- !14793  jfs: fix shift-out-of-bounds in dbSplit
- !14815  OLK-5.10
- !14790  acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- !14583  ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- !14582  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- !14822  ALSA: 6fire: Release resources at card release
- !14539 RDMA/hns backport some bugfix from maillist-v6.13 2025/01/03
- ALSA: 6fire: Release resources at card release
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures
- !14795  btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- !14768  tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- driver core: Introduce device_find_any_child() helper
- Bluetooth: fix use-after-free in device_for_each_child()
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- jfs: fix shift-out-of-bounds in dbSplit
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
- ad7780: fix division by zero in ad7780_write_raw()</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-247.0.0.146" date="1737547200">- !14414 sdma-dae: add print in exceptional branch
- !14870  quota: flush quota_release_work upon quota writeback
- !14862  drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14866  NFS: Fix up nfs_ctx_key_to_expire()
- !14853  drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- !14852  octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- !14851  nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- quota: flush quota_release_work upon quota writeback
- !14663  xsk: Add generic xdp multi-buffer send support
- NFS: Fix up nfs_ctx_key_to_expire()
- !14803  net: hsr: avoid potential out-of-bound access in fill_frame_info()
- !14829  ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- !14854  btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
- !14857  sched: psi: fix bogus pressure spikes from aggregation race
- sched: psi: fix bogus pressure spikes from aggregation race
- btrfs: check folio mapping after unlock in relocate_one_folio()
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
- xsk: Add generic xdp multi-buffer send support
- drivers:misc:sdma-dae: add print in exceptional branch</changelog>
</package>
<package pkgid="172fc87c9ef301d477370d77e57ac505cb420b7fb5fb151070087e8441a50e07" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="5.10.0" rel="248.0.0.147.oe2203sp4"/>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-239.0.0.138" date="1733313600">- !14040  hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !10939  filelock: Correct the file lock owner in fcntl_setlk64
- !11339  Fix xfs fsmap error
- !11338  xfs: fix log recovery when unknown rocompat bits are set
- !12547 [OLK-5.10] drivers: update yunsilicon drivers to version rel_2406_rc16.2
- hwpoison, memory_hotplug: lock page before unmap for hwpoisoned page
- !13234  xfs: Fix missing interval for missing_owner in xfs fsmap
- !14036  xfs: Fix data overflow in xfs_mod_fdblocks()
- !14014  *** CVE-2024-53063 ***
- !13956  fs: Fix uninitialized value issue in from_kuid and from_kgid
- !14021 [revert][2024.12.2]bugfix rdma to OLK-5.10
- xfs: Fix data overflow in xfs_mod_fdblocks()
- !13337  fix CVE-2024-50135
- !13982 [OLK-5.10]ipvlan: fix UAF after skb has been consumed by xdp generic
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- Revert "RDMA/hns: Fix cpu stuck caused by printings during reset"
- !13937  ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- !13936  wifi: rtw88: always wait for both firmware loading attempts
- !13935  Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- !13934  net/sched: accept TCA_STAB only for root qdisc
- !13933  net: ethernet: lantiq_etop: fix memory disclosure
- !13932  net: Fix an unsafe loop on the list
- !13931  net: stmmac: Fix zero-division error when disabling tc cbs
- !13930  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- !13929  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- !13928  wifi: ath11k: fix array out-of-bound access in SoC stats
- ipvlan: fix UAF after skb has been consume by xdp generic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- media: dvbdev: prevent the risk of out of memory access
- !13839  afs: Fix lock recursion
- !13860 [2024.12.2]bugfix rdma to OLK-5.10
- !13844  crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- !13921  wifi: ath10k: Fix memory leak in management tx
- !13920  RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13967  bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13966  blk-mq/scsi: tracking device queue depth via sbitmap
- bpf: Check validity of link-&gt;type in bpf_link_show_fdinfo()
- !13964 v3  arm64: mm: Stop use spinlock during pbha early init
- scsi: core: Increase max device queue_depth to 4096
- sbitmap: fix kabi broken in struct scsi_device
- sbitmap: fix kabi broken in struct blk_mq_ops and struct scsi_cmnd
- sbitmap: fix kabi broken by adding struct sbitmap_extend
- scsi: core: Fix scsi_device_max_queue_depth()
- scsi: blk-mq: Fix build warning when making htmldocs
- scsi: sbitmap: Silence a debug kernel warning triggered by sbitmap_put()
- scsi: core: Replace sdev-&gt;device_busy with sbitmap
- scsi: core: Make sure sdev-&gt;queue_depth is &lt;= max(shost-&gt;can_queue, 1024)
- scsi: core: Add scsi_device_busy() wrapper
- scsi: megaraid_sas: Replace sdev_busy with local counter
- scsi: blk-mq: Return budget token from .get_budget callback
- scsi: blk-mq: Add callbacks for storing &amp; retrieving budget token
- scsi: sbitmap: Add sbitmap_calculate_shift() helper
- scsi: sbitmap: Export sbitmap_weight
- scsi: sbitmap: Move allocation hint into sbitmap
- scsi: sbitmap: Add helpers for updating allocation hint
- scsi: sbitmap: Maintain allocation round_robin in sbitmap
- sbitmap: optimise sbitmap_deferred_clear()
- scsi: sbitmap: Remove sbitmap_clear_bit_unlock
- arm64: mm: Stop use spinlock during pbha early init
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- !13802  pinctrl: ocelot: fix system hang on level based interrupts
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- wifi: rtw88: always wait for both firmware loading attempts
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- net/sched: accept TCA_STAB only for root qdisc
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix an unsafe loop on the list
- net: stmmac: Fix zero-division error when disabling tc cbs
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath10k: Fix memory leak in management tx
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- !13890  ipmi: Use regspacings passed as a module parameter
- !13898  drm/amd/display: Check link_index before accessing dc-&gt;links[
- !13905  NFSD: Never decrement pending_async_copies on error
- NFSD: Never decrement pending_async_copies on error
- !13887  CVE-2024-49891
- !13862  net: systemport: fix potential memory leak in bcm_sysport_xmit()
- !13864  Bluetooth: bnep: fix wild-memory-access in proto_unregister
- !13867  wifi: iwlegacy: Clear stale interrupts before resuming device
- !13881  RDMA/bnxt_re: Add a check for memory allocation
- drm/amd/display: Check link_index before accessing dc-&gt;links[]
- !13878  Fix problems of mounting nfs
- ipmi: Use regspacings passed as a module parameter
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- !13854  CVE-2024-53059
- !13853  sctp: properly validate chunk size in sctp_sf_ootb()
- RDMA/bnxt_re: Add a check for memory allocation
- nfs: ignore SB_RDONLY when mounting nfs
- nfs: pass flags to second superblock
- wifi: iwlegacy: Clear stale interrupts before resuming device
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- mac80211: always have ieee80211_sta_restart()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- sctp: properly validate chunk size in sctp_sf_ootb()
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
- afs: Fix lock recursion
- pinctrl: ocelot: fix system hang on level based interrupts
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: refactor the tagset handling in nvme_reset_work
- nvme-pci: split nvme_dev_add
- xfs: Fix missing interval for missing_owner in xfs fsmap
- drivers: update Yunsilicon driver to version 2406_rc16.2
- xfs: fix an agbno overflow in __xfs_getfsmap_datadev
- xfs: fix interval filtering in multi-step fsmap queries
- xfs: fix log recovery when unknown rocompat bits are set
- filelock: Correct the file lock owner in fcntl_setlk64</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-240.0.0.139" date="1733832000">- !14129  bus: integrator-lm: fix OF node leak in probe()
- !14132 v2  ACPI: APEI: handle synchronous errors in task work
- !14046  smb: client: Fix use-after-free of network namespace.
- ACPI: APEI: handle synchronous exceptions in task work
- mm: memory-failure: move return value documentation to function declaration
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
- ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
- !13903  Script execution control
- !14119  bpf: sync_linked_regs() must preserve subreg_def
- bus: integrator-lm: fix OF node leak in probe()
- !14124  media: cx24116: prevent overflows on SNR calculus
- !14121 [PATCH OLK-5.10] perf: Add PMCG platform information for HiSilicon HIP09A
- media: cx24116: prevent overflows on SNR calculus
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- bpf: sync_linked_regs() must preserve subreg_def
- !13917 intel: backport TPMI base driver and PMT fix and update for 5.10
- !14104  nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !14114  media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- !14086  ocfs2: uncache inode which has failed entering the group
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- !13401 IMA: Fix hungtask issue of digestlist importing
- !14033  fix CVE-2024-50278
- !14087 v2  drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- !14057  ACPI: Fix Generic Initiator Affinity _OSC bit
- !14092  USB: serial: io_edgeport: fix use after free in debug printk
- !14064  vp_vdpa: fix id_table array not null terminated error
- !14073  HID: core: zero-initialize the report buffer
- !14030  drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- !14027  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- !14024  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- !14062  CVE-2024-53054
- !14055  wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- !14054  net: sched: fix use-after-free in taprio_change()
- !14006  filemap: Fix bounds checking in filemap_read()
- !14007  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- !14008  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- !14009  drm/vc4: Stop the active perfmon before being destroyed
- !14010  nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- USB: serial: io_edgeport: fix use after free in debug printk
- drivers/perf: hisi: Add support for HiSilicon DDRC v3 PMU driver
- ocfs2: uncache inode which has failed entering the group
- !13871  ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- !14018  ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- HID: core: zero-initialize the report buffer
- vp_vdpa: fix id_table array not null terminated error
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- Revert "cgroup: Fix AA deadlock caused by cgroup_bpf_release"
- !13327 cpufreq: Add SEEP governor for hardware-managed P-states
- !13995  drm/radeon: Fix encoder-&gt;possible_clones
- !13948  fix CVE-2024-49906
- cpufreq: Add SEEP governor for hardware-managed P-states
- !13988  CVE-2024-49861
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- !14043 v2  CVE-2024-40927
- !14041 sdma-dae: bugfix of channel operation
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- net: sched: fix use-after-free in taprio_change()
- smb: client: Fix use-after-free of network namespace.
- Support for auto_act_window and energy_perf in cppc_cpufreq
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- xhci: Handle TD clearing for multiple streams case
- xhci: Fix failure to give back some cached cancelled URBs.
- xhci: introduce a new move_dequeue_past_td() function to replace old code.
- xhci: Fix 5.12 regression of missing xHC cache clearing command after a Stall
- xhci: fix giving back URB with incorrect status regression in 5.12
- xhci: split handling halted endpoints into two steps
- xhci: use xhci_td_cleanup() helper when giving back cancelled URBs
- drivers:misc:sdma-dae: bugfix of channel operation
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- ACPI: CPPC: Add three register ABIs
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- drm/vc4: Stop the active perfmon before being destroyed
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- filemap: Fix bounds checking in filemap_read()
- drm/radeon: Fix encoder-&gt;possible_clones
- bpf: Fix kabi breakage in enum bpf_type_flag
- selftests/bpf: Rename ARG_PTR_TO_LONG test description
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Fix helper writes to read-only maps
- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Allow helpers to accept pointers with a fixed size
- bpf: Add MEM_UNINIT as a bpf_type_flag
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointer before try to access it
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- platform/x86/intel/pmt: telemetry: Export API to read telemetry
- platform/x86/intel/pmt: Add header to struct intel_pmt_entry
- platform/x86/intel/tpmi: Add additional TPMI header fields
- platform/x86/intel/tpmi: Align comments in kernel-doc
- platform/x86/intel/tpmi: Check major version change for TPMI Information
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel/tpmi: Change vsec offset to u64
- platform/x86/intel/tpmi: Move TPMI ID definition
- platform/x86/intel/tpmi: Modify external interface to get read/write state
- platform/x86/intel/tpmi: Don't create devices for disabled features
- platform/x86/intel/vsec: Remove nuisance message
- platform/x86/intel/vsec: Add base address field
- platform/x86/intel/vsec: Add intel_vsec_register
- platform/x86/intel/vsec: Assign auxdev parent by argument
- platform/x86/intel/vsec: remove platform_info from vsec device structure
- platform/x86/intel/vsec: Move structures to header
- platform/x86/intel/vsec: Remove unnecessary return
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- IMA: Fix hungtask issue of digestlist importing</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-241.0.0.140" date="1734523200">- !14146 Intel: backport intel uncore frequency driver update and bugfix from 6.11
- !14145 Intel: backport ISST driver update and bugfix from 6.11
- !14196  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- !13896 RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14193  nfs: fix the loss of superblock's initialized flags
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
- nfs: fix the loss of superblock's initialized flags
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !14180  xfs: allow inode inactivation during a ro mount log recovery
- !14149  CVE-2024-53142
- xfs: allow inode inactivation during a ro mount log recovery
- !14123  mm: only enforce minimum stack gap size if it's sensible
- !14172  dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- !12309 [OLK-5.10] AMD Genoa and Turin Crypto and Edac patches backport for OLK-5.10
- !14148 v2  xfs: revert fix patchs about attr inactive
- initramfs: avoid filename buffer overrun
- Revert "xfs: factor out __xfs_da3_node_read()"
- Revert "xfs: atomic drop extent entries when inactiving attr"
- platform/x86: ISST: Simplify isst_misc_reg() and isst_misc_unreg()
- platform/x86: ISST: Fix return value on last invalid resource
- platform/x86: ISST: Use only TPMI interface when present
- platform/x86: ISST: Avoid some SkyLake server models
- platform/x86: ISST: Add model specific loading for common module
- platform/x86: ISST: fix use-after-free in tpmi_sst_dev_remove()
- !12266 [OLK-5.10] AMD Genoa and Turin iommu patches backport for OLK-5.10
- !12311 [OLK-5.10] AMD Genoa and Turin Perf patches backport for OLK-5.10
- mm: only enforce minimum stack gap size if it's sensible
- config: enable CONFIG_I2C_DESIGNWARE_AMDPSP by default on x86
- platform/x86/intel-uncore-freq: Don't present root domain on error
- platform/x86/intel-uncore-freq: Increase minor number support
- platform/x86: intel-uncore-freq: Fix types in sysfs callbacks
- platform/x86/intel-uncore-freq: Process read/write blocked feature status
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- platform/x86: ISST: Support SST-BF and SST-TF per level
- platform/x86: ISST: Add missing MODULE_DESCRIPTION
- platform/x86: ISST: Add dev_fmt
- platform/x86: ISST: Support partitioned systems
- platform/x86: ISST: Shorten the assignments for power_domain_info
- platform/x86: ISST: Use local variable for auxdev-&gt;dev
- platform/x86: ISST: Allow reading core-power state on HWP disabled systems
- platform/x86: ISST: Process read/write blocked feature status
- EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh
- hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models
- x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models
- EDAC/amd64: Rework hw_info_{get,put}
- EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt
- EDAC/amd64: Issue probing messages only on properly detected hardware
- EDAC/amd64: Drop dbam_to_cs() for Family 17h and later
- EDAC/amd64: Rename debug_display_dimm_sizes()
- EDAC/amd64: Remove early_channel_count()
- EDAC/amd64: Remove PCI Function 0
- EDAC/amd64: Remove PCI Function 6
- EDAC/amd64: Remove scrub rate control for Family 17h and later
- EDAC/amd64: Don't set up EDAC PCI control on Family 17h+
- x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC
- x86/microcode/AMD: Remove unused PATCH_MAX_SIZE macro
- x86/microcode/AMD: Rip out static buffers
- x86/microcode/AMD: Fix mixed steppings support
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Rename a couple of functions
- crypto: ccp - Add support for PCI device 0x156E
- crypto: ccp - Add support for PCI device 0x17E0
- crypto: ccp - Add support for ringing a platform doorbell
- crypto: ccp - Enable platform access interface on client PSP parts
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: ccp - Add support for an interface for platform features
- crypto: ccp - Move some PSP mailbox bit definitions into common header
- crypto: ccp - Add a header for multiple drivers to use `__psp_pa`
- crypto: ccp - Add support for new CCP/PSP device ID
- i2c: designware: Fix improper usage of readl
- i2c: designware: Add AMD PSP I2C bus support
- genirq/msi: Fix KABI breakage in struct msi_msg and struct apic
- iommu/amd: Set iommu-&gt;int_enabled consistently when interrupts are set up
- iommu/amd: Remove useless irq affinity notifier
- x86/msi: Fix msi message data shadow struct
- perf script: Fix PERF_SAMPLE_WEIGHT_STRUCT support
- perf/x86/amd/core: Define a proper ref-cycles event for Zen 4 and later
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later
- perf script ibs: Support new IBS bits in raw trace dump
- perf tool ibs: Sync AMD IBS header file
- perf report: Add support to print a textual representation of IBS raw sample data
- perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods
- perf evlist: Use the right prefix for 'struct evlist' sample parsing methods
- perf evlist: Use the right prefix for 'struct evlist' raw samples methods
- perf report: Add tools/arch/x86/include/asm/amd-ibs.h
- perf header: Record non-CPU PMU capabilities
- perf inject: Keep some features sections from input file
- libperf: Add preadn()
- perf header: Add ability to keep feature sections
- perf header: Store PMU caps in an array of strings
- perf header: Pass "cpu" pmu name while printing caps
- perf header: Support HYBRID_CPU_PMU_CAPS feature
- perf header: Support HYBRID_TOPOLOGY feature
- perf pmu: Add hybrid helper functions
- perf pmu: Save detected hybrid pmus to a global pmu list
- perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
- perf pmu: Parse pmu caps sysfs only once
- perf record ibs: Warn about sampling period skew
- perf evsel: Make evsel__env() always return a valid env
- perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings
- perf tools: Support PERF_SAMPLE_WEIGHT_STRUCT
- perf record: Add support for PERF_SAMPLE_CODE_PAGE_SIZE
- perf evsel: Emit warning about kernel not supporting the data page size sample_type bit
- perf record: Support new sample type for data page size
- perf/x86/amd/core: Avoid register reset when CPU is dead
- perf/x86/amd: Do not WARN() on every IRQ
- iommu/amd: Fix IOMMU interrupt generation in X2APIC mode
- iommu/amd: Don't register interrupt remapping irqdomain when IR is disabled
- iommu/amd: Fix union of bitfields in intcapxt support
- iommu/amd: Use msi_msg shadow structs
- iommu/intel: Use msi_msg shadow structs
- x86/msi: Provide msi message shadow structs
- genirq/msi: Allow shadow declarations of msi_msg:: $member
- x86/apic: Always provide irq_compose_msi_msg() method for vector domain
- x86/apic: Cleanup destination mode
- x86/apic: Get rid of apic:: Dest_logical
- x86/apic: Replace pointless apic:: Dest_logical usage
- x86/apic: Cleanup delivery mode defines
- x86/msi: Only use high bits of MSI address for DMAR unit</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-242.0.0.141" date="1734523201">- !14216 perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14142  x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- perf cs-etm: Use evlist__event2evsel() in cs-etm.c
- !14109  RDMA/hns: backport some bugfix from maillist linux
- !14137  ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci"
- RDMA/hns: Fix flush cqe error when racing with destroy qp</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-243.0.0.142" date="1735128000">- !14246  soc: hisilicon: hbmdev: Only support built-in
- !14242  sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- !14241  sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- soc: hisilicon: hbmdev: Only support built-in
- !14060  etmem : fix page_ref count leak and head missing useing problem
- !14205  crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation
- etmem : fix page_ref count leak and head missing useing problem</changelog>
  <changelog author="Li Nan &lt;linan122@huawei.com&gt; - 5.10.0-244.0.0.143" date="1735646400">- !14314  x86/sgx: Fix deadlock in SGX NUMA node search
- !14315  media: v4l2-tpg: prevent the risk of a division by zero
- !14293  Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14289 v2  erofs: add ondemand mode support
- !14269  iomap: fix zero padding data issue in concurrent append writes
- !14235  xfs: fix attr inactive issue
- !14339  ocfs2: free inode when ocfs2_get_init_inode() fails
- !14331  mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- !14330  mm/khugepaged: fix -&gt;anon_vma race
- !14305  RDMA/hns: Some patches are integrated into OLK-5.10
- !14333  ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- ocfs2: free inode when ocfs2_get_init_inode() fails
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- mm: avoid unconditional one-tick sleep when swapcache_prepare fails
- mm/khugepaged: fix -&gt;anon_vma race
- !13006  Fix CVE-2024-50086
- !14309  printk: Fix the qspinlock deadloop caused by zap_locks()
- !14252 【OLK-5.10】backport some bugfix of hisi_sas module from upstream
- media: v4l2-tpg: prevent the risk of a division by zero
- x86/sgx: Fix deadlock in SGX NUMA node search
- printk: Fix the qspinlock deadloop caused by zap_locks()
- RDMA/hns: Don't query *except on hip10*
- RDMA/hns: Fix creating GSI QP in non-extended SGE QP bank
- RDMA/hns: Fix bonding failure due to wrong reset_state
- config: Enable IMA_FIX_OVERLAYFS_DETECTION in openeuler defconfigs
- IMA: Fix the incorrect definition and use of IMA_FIX_OVERLAYFS_DETECTION
- !14208 Fix perf coredump and refcnt inccoret
- cachefiles: modify inappropriate error return value in cachefiles_daemon_secctx
- fscache: modify fscache_hash_cookie() to enhance security
- cachefiles: prefault in user pages to aovid ABBA deadlock
- fscache/cachefiles: add a memory barrier for page_write
- fscache/cachefiles: add a memory barrier for waking and waiting
- fscache: add a memory barrier for FSCACHE_COOKIE_LOOKING_UP
- wait_on_bit: Add wait_on_bit_acquire() to provide memory barrier
- s390: provide arch_test_bit_acquire() for architecture s390
- wait_on_bit: add an acquire memory barrier
- erofs: unify anonymous inodes for blob
- erofs: remove unused device mapping in meta routine
- fscache: fix assertion failure in cachefiles_put_object()
- cachefiles: cyclic allocation of msg_id to avoid reuse
- fscache: fix op leak due to abort init after parent ready
- cachefiles: Set object to close if ondemand_id &lt; 0 in copen
- erofs: correct the blknr/blkoff calculation in erofs_read_raw_page()
- cachefiles: Change the mark inactive sequence in erofs ondemand mode
- cachefiles: clear FSCACHE_COOKIE_NO_DATA_YET for the new ondemand object
- cachefiles: Add restrictions to cachefiles_daemon_cull()
- cachefiles: disallow to complete open requests with uninitialised ondemand_id
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- fscache: Add the unhash_cookie mechanism to fscache_drop_object()
- cachefiles: call cachefiles_ondemand_init_object() out of dir inode lock
- cachefiles: Fix cookie reference count leakage error
- cachefiles: Restrict monitor calls to read_page
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- fscache: set the default value of object_max_active to 256
- cachefiles: Fix NULL pointer dereference in object-&gt;file
- cachefiles: make on-demand read killable
- cachefiles: never get a new anon fd if ondemand_id is valid
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: flush ondemand_object_worker during clean object
- fscache: limit fscache_object_max_active to avoid blocking
- cachefiles: flush all requests for the object that is being dropped
- cachefiles: stop sending new request when dropping object
- cachefiles: add consistency check for copen/cread
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: remove err_put_fd tag in cachefiles_ondemand_daemon_read()
- fscache: Fix trace UAF in fscache_cookie_put()
- erofs: fix order &gt;= MAX_ORDER warning due to crafted negative i_size
- cachefiles: use mainline xattr in ondemand mode
- fscache: rename new_location to new_version
- erofs: switch to use new location
- erofs: remove erofs_fscache_netfs
- cachefiles: handle the unprintable case for new location in cachefiles_cook_key()
- cachefiles: use key_hash as csum for new location
- cachefiles: skip volum csum cachefiles_cook_key() for new location
- cachefiles: skip acc in cachefiles_cook_key() for new location
- cachefiles: use volume key directly in cachefiles_cook_key() for new location
- cachefiles: factor out helper to generate csum from cachefiles_cook_key()
- cachefiles: factor out helper to generate acc from cachefiles_cook_key()
- fscache: generate new key_hash for new location
- fscache: add new helper to determine cachefile location
- fscache: add a waiting mechanism when duplicate cookies are detected
- erofs: maintain cookies of share domain in self-contained list
- fscache: fix kernel BUG at __fscache_read_or_alloc_page
- erofs: fix handling kern_mount() failure
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- erofs: check the uniqueness of fsid in shared domain in advance
- fscache: fix assertion failure in fscache_put_object()
- fscache: fix reference count leakage during abort init
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
- erofs: relinquish volume with mutex held
- erofs: add erofs_ondemand switch
- erofs: add erofs switch to better control it
- erofs: fix page unlock advance during readahead
- openeuler_defconfig: enable erofs ondemand for x86 and arm64
- anolis: cachefiles: fix potential NULL in error path
- anolis: cachefiles: add missing lock protection when polling
- anolis: cachefiles: reset object-&gt;private to NULL when it's freed
- anolis: cachefiles: add restore command to recover inflight ondemand read requests
- anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode
- anolis: cachefiles: resend an open request if the read request's object is closed
- anolis: cachefiles: extract ondemand info field from cachefiles_object
- anolis: cachefiles: introduce object ondemand state
- anolis: fscache: export fscache_object_wq
- anolis: cachefiles: optimize on-demand IO path with buffer IO
- erofs: remove unused EROFS_GET_BLOCKS_RAW flag
- erofs: fix use-after-free of fsid and d